forked from MISP/PyMISP
-
Notifications
You must be signed in to change notification settings - Fork 0
/
CHANGELOG.txt
2051 lines (1647 loc) · 73.6 KB
/
CHANGELOG.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
Changelog
=========
v2.4.89 (2018-03-23)
--------------------
New
~~~
- Add email object generator. [Raphaël Vinot]
- Method to return an object by uuid. [chrisr3d]
Changes
~~~~~~~
- Bump version. [Raphaël Vinot]
- Bump Changelog. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
Fix
~~~
- Test files. [Raphaël Vinot]
- Do not try to upload objects in case make_binary_objects fails.
[Raphaël Vinot]
Fix #192
- Typo. [chrisr3d]
- Update reference test cases. [Raphaël Vinot]
Other
~~~~~
- Update README.md. [Sami Mokaddem]
Replaced WHAT by Description
- Update README.md. [Sami Mokaddem]
Added example of flush operation
- Merge pull request #204 from mokaddem/redis-feed-generator. [Alexandre
Dulaunoy]
Realtime feed generator
- Added more examples. [Sami Mokaddem]
- Added usage in README. [Sami Mokaddem]
- Added MISPItemToRedis and updated readme accordingly. [Sami Mokaddem]
- Updated readme 2. [Sami Mokaddem]
- Updated readme. [Sami Mokaddem]
- Moved object constructor into their own folder. [Sami Mokaddem]
- Feature: Added support of MISP object constructor instead of the
generic_generator. [Sami Mokaddem]
- Added brief object description. [Sami Mokaddem]
- Removed unused function. [Sami Mokaddem]
- Generator handles file flushing itself. [Sami Mokaddem]
- Added description of generator object. [Sami Mokaddem]
- Updated README. [Sami Mokaddem]
- Creation of the generator object which permit to easily add attributes
and objects to daily events, stored as a MISP feed. Plus, script
fromredis which pops queue element in redis to put them in the feed.
[Sami Mokaddem]
- Added install script. [Sami Mokaddem]
- Added support of MISP Object. [Sami Mokaddem]
- Overhall seems to work, need testing. [Sami Mokaddem]
- Init draft of redis to feed. [Sami Mokaddem]
- Merge pull request #203 from weslambert/master. [Alexandre Dulaunoy]
fix typo(s)
- Fix typo(s) [weslambert]
- Merge pull request #198 from RichieB2B/client-cert. [Raphaël Vinot]
Point to right anchor for client side certificates
- Point to right anchor for client side certificates. [Richard van den
Berg]
- Merge pull request #197 from RichieB2B/misp2cef. [Raphaël Vinot]
Add misp2cef example
- Add misp2cef example. [Richard van den Berg]
- Merge pull request #196 from RichieB2B/ncsc-nl/from_dict. [Raphaël
Vinot]
Fix misp2clamav
- Use from_dict. [Richard van den Berg]
- Merge pull request #195 from ANSSI-BSOD/patch-1. [Raphaël Vinot]
add search on sighting
- Add search on sighting. [ANSSI-BSO-D]
added the possibility to search sightings :
Here some example :
```python
print(misp.sighting_list(424242))
```
The answer will give a sighting list corresponding to the attribute 424242.
```python
print(misp.sighting_list(element_id=42, org_id=2, scope=event))
```
The return will be a sighting list of event 42 with a filter for organisation 2.
- Merge pull request #189 from neok0/master. [Raphaël Vinot]
add attributes within objects as well, for tagging via value/id/uuid
- Add attributes within objects as well, for tagging via value/id/uuid.
[Tobias Mainka]
- Merge pull request #190 from chrisr3d/master. [Raphaël Vinot]
Method to return an object by uuid
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
v2.4.87.1 (2018-02-13)
----------------------
New
~~~
- APIs to manage sharing groups. [Raphaël Vinot]
Fix #185
- ReturnMetaAttributes flag for freeTextImport API. [Raphaël Vinot]
Fix #188
Changes
~~~~~~~
- Bump Changelog. [Raphaël Vinot]
- Version bump. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump describeTypes (add mime) [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump describeType. [Raphaël Vinot]
- Bump describeType. [Raphaël Vinot]
Fix
~~~
- Encode string in _encode_file_to_upload. [Raphaël Vinot]
Other
~~~~~
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #186 from cudeso/master. [Alexandre Dulaunoy]
Prevent unpublished events to be included in feed
- Prevent unpublished events to be included in feed. [Koen Van Impe]
Change default proposed config
v2.4.87 (2018-01-28)
--------------------
New
~~~
- Add bindings for Galaxies and Taxonimies. [Raphaël Vinot]
- Add bindings to PyMISPWarninglists. [Raphaël Vinot]
Changes
~~~~~~~
- Version bump. [Raphaël Vinot]
- Bump Changelog. [Raphaël Vinot]
- Skip sample upload test on python 3.4. [Raphaël Vinot]
- Re-enable python3.4 on travis... [Raphaël Vinot]
- Bump misp-object & describeTypes. [Raphaël Vinot]
- Cleanup new sbsignature generator. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Use defaultdict when possible. [Raphaël Vinot]
- Raise an exception when distribution is sharing group, but the ID is
missing. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Improve Object Attribute editing. [Raphaël Vinot]
- Allow to pass a directory with custom object templates. [Raphaël
Vinot]
- Remove old warning. [Raphaël Vinot]
Fix
~~~
- Only skip test for 3.0->3.5. [Raphaël Vinot]
- Sys.api_version -> sys.version_info. [Raphaël Vinot]
- Allow to pass value, UUID, or ID to a sighting. [Raphaël Vinot]
- Do not use basicConfig in __init__ [Raphaël Vinot]
Fix #170
- Add_hashes was broken. [Raphaël Vinot]
Fix #174
- Make python2 happy. [Raphaël Vinot]
- Download old samples was broken. [Raphaël Vinot]
Other
~~~~~
- Revert "chg: Re-enable python3.4 on travis..." [Raphaël Vinot]
Lief doesn't support python 3.4
This reverts commit 35a8d92acecd7a313bedcf197539eaa82176bcc7.
- Add: Allow to fetch warninglists. [Raphaël Vinot]
Fix #180
- Merge pull request #181 from LOUISLCE/feat-add-tests. [Raphaël Vinot]
Add and refactor some tests
- Add tag test. [Louis LCE]
- Add a simple test for uploading samples. [Louis LCE]
- Add warning when failing to import dependencies. [Louis LCE]
- Improve and refactor attributes tests. [Louis LCE]
- Merge branch 'LDO-CERT-master' [Raphaël Vinot]
- Sb-signature library. [garanews]
Created sb-signature library with relative example for testing.
Thanks @dadokkio
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #178 from CenturyLinkCIRT/master. [Raphaël Vinot]
Change in add_attachment. Allow explicit attachment naming.
- Linting. [Kory Kyzar]
- Bug fix. [Kory Kyzar]
- Change in add_attachment. Allow explicit attachment naming. [Kory
Kyzar]
- Merge pull request #1 from MISP/master. [Kory Kyzar]
Syncing with upsteam
- Merge pull request #177 from kirzaks/master. [Raphaël Vinot]
Change in new_tag function. Added attributie 'hide_tag'
- Change in new_tag function. Added attributie 'hide_tag' [Armīns Palms]
- Merge pull request #176 from kirzaks/master. [Raphaël Vinot]
Change the comment of attribute
- Change the comment of attribute. [Armīns Palms]
- Merge pull request #175 from LOUISLCE/fix-add-hashes-test. [Raphaël
Vinot]
Fix add_hashes online test function parameters
- Fix add_hashes test function parameters. [Louis LCE]
- Merge branch 'neok0-add-objects-template-file-path' [Raphaël Vinot]
- Merge branch 'add-objects-template-file-path' of
https://github.com/neok0/PyMISP into neok0-add-objects-template-file-
path. [Raphaël Vinot]
- Added misp object templates path argument. [Tobias Mainka]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Update settings.default.py. [Andras Iklody]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
v2.4.85.1 (2018-01-10)
----------------------
Changes
~~~~~~~
- Bump Changelog. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Cleanup from last commit. [Raphaël Vinot]
- Move MISPTag to Abstract MISP. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Fix tests (new template version) [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Add test for loading existing malware sample from MISP. [Raphaël
Vinot]
- Multiple changes. [Raphaël Vinot]
* Fix timestamp dump (properly enforce UTC)
* Properly handle proposals
* Add many getter/setter
* Add dedicated test cases for MISPEvent and other objects
- Allow do pass a category in default_attributes_parameters for object.
[Raphaël Vinot]
fix #166
- Default for sharing_group_id is 0. [Raphaël Vinot]
- Add MISPSighting class. [Raphaël Vinot]
- Bump Changelog. [Raphaël Vinot]
Fix
~~~
- Edited method works as expected, add tests. [Raphaël Vinot]
- Forgotten test files in last commit... [Raphaël Vinot]
- Disable_correlation from template not properly used. [Raphaël Vinot]
- Don't remove the distribution and sharing_group_id from
default_attributes_parameters. [Raphaël Vinot]
- The sharing_group_id isn't required. [Raphaël Vinot]
- Last commit was broken... [Raphaël Vinot]
- Properly set Tag to attributes within objects. [Raphaël Vinot]
- Add method to add tags to objects. [Raphaël Vinot]
Fix #160
- Typo in set_sightings. [Raphaël Vinot]
Fix #161
Other
~~~~~
- Merge pull request #164 from MISP/refactor. [Raphaël Vinot]
chg: Multiple changes
- Merge pull request #162 from AninaAntonie/patch-1. [Raphaël Vinot]
fix: set_sightings
- Set_sightings. [AninaAntonie]
Maybe I didn't use it correctly but the method set_sightings didn't work for me. It's working now but I'm not sure whether sending a request for every sighting in the list is the best solution.
- Merge pull request #165 from dadokkio/master. [Raphaël Vinot]
_default_attributes_parameters - if set - is a dict
- _default_attributes_parameters - if set - is a dict. [Arcuri Davide]
Manage distribution and sharing_group_id as dict key like the other fields.
-- Not sure about default
v2.4.85 (2017-12-22)
--------------------
New
~~~
- Add last field to get_csv. [Raphaël Vinot]
- (hopefully) Cleverer handling of timestamps in the objects. [Raphaël
Vinot]
& some cleanup
Changes
~~~~~~~
- Bump misp-objects. [Raphaël Vinot]
- Version bump. [Raphaël Vinot]
- Update documentation. [Raphaël Vinot]
- Update documentation, cleanup. [Raphaël Vinot]
- Bump describeTypes.json. [Raphaël Vinot]
- Validate attributes in attributes.setter. [Raphaël Vinot]
- Add get_attribute_tag method at MISPEvent level. [Raphaël Vinot]
Also add a MISPTag class for consistency.
- Bump misp-objects. [Raphaël Vinot]
- Bump describeTypes. [Raphaël Vinot]
- Add __repr__ methods (fix last commit) [Raphaël Vinot]
- Add __repr__ methods. [Raphaël Vinot]
- Use new format for filtering. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump describeTypes. [Raphaël Vinot]
Fix
~~~
- Properly use the edited flag. [Raphaël Vinot]
- Add setter for Attribute in MISPEvent. [Raphaël Vinot]
- Forgotten calls to master class. [Raphaël Vinot]
- Properly call datetime.datetime.utcfromtimestamp. [Raphaël Vinot]
- Fix typo. [Raphaël Vinot]
- Fix python2.7 support. [Raphaël Vinot]
- Initialize default class parameters. [Raphaël Vinot]
Fix #155
Other
~~~~~
- Merge branch 'cvandeplas-master' [Raphaël Vinot]
- Merge branch 'master' of https://github.com/cvandeplas/PyMISP into
cvandeplas-master. [Raphaël Vinot]
- Merge remote-tracking branch 'MISP/master' [Christophe Vandeplas]
- Fix MISPObject missing distribution and sharing_group_id. [Christophe
Vandeplas]
- fix MISPObject missing distribution concept
- fix language typo paramaters => parameters
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #156 from cvandeplas/master. [Alexandre Dulaunoy]
document submodule downloading
- Document submodule downloading. [Christophe Vandeplas]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #154 from wagner-certat/inc-meta. [Raphaël Vinot]
Include documentation and examples in source dist
- Include documentation and examples in source dist. [Sebastian Wagner]
v2.4.84 (2017-12-13)
--------------------
New
~~~
- Add methods to get taxonomy(ies) [Raphaël Vinot]
Thanks to @truckydev
- Add method to get all the events modified in an interval. [Raphaël
Vinot]
Changes
~~~~~~~
- Bump misp-objects. [Raphaël Vinot]
- Bump Changelog. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Make the library easier to use. [Raphaël Vinot]
- Allow to pass a pseudofile to LIEF. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Update changelog. [Raphaël Vinot]
Fix
~~~
- Disable pseudofile support in py2, skip tests. [Raphaël Vinot]
- Typo in error output text description. [Eric Jaw]
Other
~~~~~
- Merge pull request #151 from MISP/refactor. [Raphaël Vinot]
chg: Make the library easier to use
- Merge pull request #150 from sdrees/first-friendly-contribution-
enhance-coverage. [Raphaël Vinot]
First friendly contribution enhance coverage
- Further tests added (for public methods) [Stefan Hagen (Individual)]
- Changed asserts from dict usecases to set comparison to workaround non
3.6 behavior. [Stefan Hagen (Individual)]
- Merge branch 'master' of https://github.com/MISP/PyMISP into first-
friendly-contribution-enhance-coverage. [Stefan Hagen (Individual)]
- Enhance coverage and fix en passant with focus on api. [Stefan Hagen
(Individual)]
- Merge branch 'truckydev-get_last_modified_event' [Raphaël Vinot]
- Merge branch 'get_last_modified_event' of
https://github.com/truckydev/PyMISP into truckydev-
get_last_modified_event. [Raphaël Vinot]
- - Correction for 'last' param. 'last' gives the latest events that
have been published - add get_events_last_modified() this function
returns the modified events based on timestamp. [Tristan METAYER]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #149 from naisanza/master. [Raphaël Vinot]
fix: Typo in error output text description
v2.4.83 (2017-12-06)
--------------------
New
~~~
- Add get CSV method. [Raphaël Vinot]
Changes
~~~~~~~
- Allow to pass a proxy to query VT. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump version to 2.4.83. [Raphaël Vinot]
- Do not get the event from the server before publishing if
PyMISP.publish gets an ID. [Raphaël Vinot]
- Add live tests for recommended pymisp version and describeTypes up-to-
date. [Raphaël Vinot]
- Add a way to check if the ACL is up-to-date. [Raphaël Vinot]
- Add validators for describeTypes on the live instance. [Raphaël Vinot]
- Update PDF link to doc. [Raphaël Vinot]
- Add example file to push OpenIOC file to MISP. [Raphaël Vinot]
chg: Add some imports in the tool's init file
- Bump misp-objects. [Raphaël Vinot]
- Change version number to master in the doc. [Raphaël Vinot]
- Add new objects: MISPUser and MISPOrganisation. [Raphaël Vinot]
- Add a generic MISP object generator. [Raphaël Vinot]
- Allow to add multiple attribute of the same type. [Raphaël Vinot]
- Add fast publish method. [Raphaël Vinot]
Fix #86
- Improve documentation. [Raphaël Vinot]
Fix #121
Fix
~~~
- Typo in the tests. [Raphaël Vinot]
- Typo in live tests. [Raphaël Vinot]
- Bump describeTypes.json. [Raphaël Vinot]
Add testing
Other
~~~~~
- Merge pull request #147 from StrayLightning/master. [Raphaël Vinot]
Check explicitly for a 500 response from the server with no response content
- Improve the exception message for a server 500+ response with no
response content. [StrayLightning]
- Check for zero-length 500 response from the server and produce a
suitable error message. [StrayLightning]
In experimenting with PyMISP I am triggering problems on the server I
am using. Occasionally the server will return a 500 response with a
message indicating an internal error, but more often than not it returns
a 500 response with no contents, and _check_response falls over itself,
generating hard-to-fathom exception from the json internals.
This commit hardens _check_response by detecting zero-length responses
and raising a suitable exception.
Also fix a missing bracket in one of the subsequent exception strings.
- Merge pull request #146 from c-goes/lief_integrity_exception. [Raphaël
Vinot]
Make FileObject creation work if lief parsing fails
- Make FileObject creation work if lief parsing fails. [c-goes]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #144 from c-goes/objects_delete. [Raphaël Vinot]
allow deletion of objects and object references
- Allow deletion of objects and object references. [c-goes]
- Update doc badge links. [Raphaël Vinot]
- Merge pull request #143 from 3c7/feature/send_attributes. [Raphaël
Vinot]
Adding multiple named attributes (without proposal) require a single POST request now
- Adding multiple named attributes require a single POST request now.
[3c7]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #142 from c-goes/master. [Raphaël Vinot]
replaced is_digit() with isdigit()
- Fixed typo. [c-goes]
- Merge remote-tracking branch 'upstream/master' [c-goes]
- Merge pull request #141 from SteveClement/master. [Raphaël Vinot]
Remove CIRCL repo references from README.md & fix epydoc
- - Remove CIRCL reference from README.md - Updated 2 bad indentations
where epydoc was Warning. [Steve Clement]
- Merge remote-tracking branch 'upstream/master' [c-goes]
- Merge branch 'master' of https://github.com/MISP/PyMISP into
messageidtype. [c-goes]
- Added default_category for email-message-id. [c-goes]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge branch 'feature/feedgenerator_rework' [iglocska]
- Merge branch 'master' of https://github.com/MISP/PyMISP into
feature/feedgenerator_rework. [iglocska]
- Rework of the feed generator. [iglocska]
- use objects, attribute tags and object references correctly
- generate quickhashlist for fast lookups / future MISP caching mechanism
- saner structure (herp-a-derp)
v2.4.82 (2017-11-09)
--------------------
New
~~~
- Proper debug system. [Raphaël Vinot]
Make it easy to investigate the json blobs sent to the server.
Changes
~~~~~~~
- Bump PyMISP version. [Raphaël Vinot]
- Bump CHANGELOG. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Update readme for new logging system. [Raphaël Vinot]
- Small improvments in the logging system. [Raphaël Vinot]
- Properly use python logging module. [Raphaël Vinot]
- Update asciidoctor generator. [Raphaël Vinot]
- Remove warning if PyMISP is too new. [Raphaël Vinot]
- Add simple asciidoc generator for MISP event. [Raphaël Vinot]
- Update changelog. [Raphaël Vinot]
Fix
~~~
- Typo loger -> logger. [Raphaël Vinot]
- Let load unknown object relations in known templates. [Raphaël Vinot]
This isn't recommended, but happens very often.
- Allow to load non-malware ZIP files in MISP Event. [Raphaël Vinot]
Prior to his patch, any zip file loaded by MISP Event was unpacked and
processed as an excrypted malware from MISP.
- Properly pass the distribution when uploading a sample. [Raphaël
Vinot]
- Properly upload a sample in an existing event. [Raphaël Vinot]
Fix https://github.com/MISP/PyMISP/issues/123
- Properly set the distribution at event level. [Raphaël Vinot]
fix #120
- Properly pop the distribution key. [Raphaël Vinot]
- Update dependencies for VT generator. [Raphaël Vinot]
Other
~~~~~
- Merge pull request #126 from CenturyLinkCIRT/master. [Raphaël Vinot]
Added vt_to_misp.py example and VTReportObject
- Merge branch 'master' of https://github.com/MISP/PyMISP. [Thomas
Gardner]
- Fix test suite. [Raphaël Vinot]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #122 from LDO-CERT/master. [Raphaël Vinot]
Created add_generic_object.py
- Created add_generic_object.py. [garanews]
usage: add_generic_object.py [-h] -e EVENT -t TYPE -d DICT
Examples:
python3 add_generic_object.py -e 1683 -t email -d '{"subject":"The Pink Letter", "to":"jon@snow.org"}'
python3 add_generic_object.py -e 2343 -t person -d '{"first-name":"Daenerys", "last-name":"Targaryen", "place-of-birth":"Dragonstone"}'
python3 add_generic_object.py -e 3596 -t "domain|ip" -d '{"domain":"stormborn.org", "ip":"50.63.202.33"}'
- Added vtreportobject and vt_to_misp example. [Thomas Gardner]
- Created add_generic_object.py. [garanews]
usage: add_generic_object.py [-h] -e EVENT -t TYPE -d DICT
Examples:
python3 add_generic_object.py -e 1683 -t email -d '{"subject":"The Pink Letter", "to":"jon@snow.org"}'
python3 add_generic_object.py -e 2343 -t person -d '{"first-name":"Daenerys", "last-name":"Targaryen", "place-of-birth":"Dragonstone"}'
python3 add_generic_object.py -e 3596 -t "domain|ip" -d '{"domain":"stormborn.org", "ip":"50.63.202.33"}'
v2.4.81.2 (2017-10-24)
----------------------
Changes
~~~~~~~
- Version bump. [Raphaël Vinot]
- Update changelog. [Raphaël Vinot]
Fix
~~~
- Properly bundle object templates. [Raphaël Vinot]
v2.4.81.1 (2017-10-24)
----------------------
Changes
~~~~~~~
- Bump version. [Raphaël Vinot]
- Do not raise an exception when the object template is unknown.
[Raphaël Vinot]
+ bump misp-object
- Bump misp-objects. [Raphaël Vinot]
- Allow to hard delete an attribute by ID. [Raphaël Vinot]
- Update comments. [Raphaël Vinot]
- Bump misp-objects and describeTypes. [Raphaël Vinot]
Fix
~~~
- Properly bundle object templates. [Raphaël Vinot]
- Fix typos and logic mistakes in mispevent. [Raphaël Vinot]
- Fix travis build. [Raphaël Vinot]
- Min required version of setuptools. [Raphaël Vinot]
- Improve dependencies listing. [Raphaël Vinot]
Partial fix for #110
- Missing default category. [Raphaël Vinot]
Fix #119
Other
~~~~~
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Update openioc.py. [Andras Iklody]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #121 from kx499/master. [Raphaël Vinot]
Added **kwargs to add_named_attribute call in add_attachment
- Added **kwargs to add_named_attribute call in add_attachment.
[tssbo82]
- Update README. [Raphaël Vinot]
- Update changelog. [Raphaël Vinot]
v2.4.81 (2017-10-09)
--------------------
Fix
~~~
- Changelog config + update. [Raphaël Vinot]
Other
~~~~~
- Up: bump version. [Raphaël Vinot]
- Up: Bump misp-objects. [Raphaël Vinot]
v2.4.80.1 (2017-10-04)
----------------------
Changes
~~~~~~~
- Update changelog. [Raphaël Vinot]
Fix
~~~
- Change readme. [Raphaël Vinot]
- Create file object. [Raphaël Vinot]
Was broken in case the file was neither PE/ELF/Mach-O
- Allow again to tag/delete unsaved attributes. [Raphaël Vinot]
- Live tests. [Raphaël Vinot]
- Import the openioc converter from tool again. [Raphaël Vinot]
Other
~~~~~
- Up: Version bump. [Raphaël Vinot]
- Up: Bump misp-objects & describeTypes. [Raphaël Vinot]
- Update readme. [Raphaël Vinot]
- Merge pull request #116 from cgi1/patch-2. [Raphaël Vinot]
Similar to #114 on attribute level
- Similar to #114 on attribute level. [cgi1]
`add_attribute_tag(tag,attribute_identifier)` fails if attribute does not have any tag in before.
- Merge pull request #115 from cgi1/patch-1. [Raphaël Vinot]
Fixing #114 (MISPEvent.add_tag(tag) fails if inital event does not contain tag )
- Fixing #114. [cgi1]
- Merge pull request #112 from CenturyLinkCIRT/unknown-object-name-
patch. [Raphaël Vinot]
Formatted "Unknown MISP object" error message
- Formatted "Unknown MISP object" error message. [infosec-intern]
When a user tries to add an object with a name that doesn't exist, the error thrown was missing its format string
This ended up looking like
pymisp.exceptions.UnknownMISPObjectTemplate: {} is unknown in the MISP object directory.
Here's a patch that adds self.name to the format string
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #111 from wagner-certat/skip-tests. [Raphaël Vinot]
- TST: skip test with optional files if not existing. [Sebastian Wagner]
- TST: update test requirements. [Sebastian Wagner]
- Update: make make_binary_objects more flexible. [Raphaël Vinot]
fix: use proper exception handlers
v2.4.80 (2017-09-18)
--------------------
- Properly initialize a new malware sample. [Raphaël Vinot]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Permission issue... [Alexandre Dulaunoy]
- Merge branch 'objects' [Raphaël Vinot]
- Bump misp object. [Raphaël Vinot]
- Allow to get the list of known types out of MISPEvent again. [Raphaël
Vinot]
- Merge branch 'objects' of github.com:MISP/PyMISP into objects.
[Raphaël Vinot]
- Changed source => object / destination => referenced. [iglocska]
- Use MISPAbstract as a master class everywhere. [Raphaël Vinot]
This is probably breaking everything.... ¯\_(ツ)_/¯
- Bump miso-objects. [Raphaël Vinot]
- Changed two fields in object references. [iglocska]
- source_uuid => object_uuid
- destination_uuid => referenced_uuid
- Some more refactoring. [Raphaël Vinot]
- Some more refactoring and cleanup. [Raphaël Vinot]
- Update object definitions. [Raphaël Vinot]
- Update PE generator. [Raphaël Vinot]
- Refactoring in order to load objects. [Raphaël Vinot]
- Add support for multiple entries of the same type in an object.
[Raphaël Vinot]
- Remove some python versions from travis. [Raphaël Vinot]
- Do not try to run code requiring lief. [Raphaël Vinot]
- Remove ImportError. [Raphaël Vinot]
- Install deps in travis. [Raphaël Vinot]
- Update tests. [Raphaël Vinot]
- Do not fail if pymisp is not installed. [Raphaël Vinot]
- Add support for ELF and MachO objects. [Raphaël Vinot]
- Update get_template_id, cleanup. [Raphaël Vinot]
- Refactor all the things. [Raphaël Vinot]
Add script for MISP core, make everything generic.
- Fixing undefined ressources_path. [edhoedt]
- Update function names in mispevent. [Raphaël Vinot]
- Re-enable python < 3.5 support. [Raphaël Vinot]
- Update file/pe/pe-sections objects creator. [Raphaël Vinot]
- Doesn't require describe_types in MISPAttribute's constructor.
[Raphaël Vinot]
- Update accordingly to the current server implementation. [Raphaël
Vinot]
- Re-enable python2 support... [Raphaël Vinot]
- Initial commit supporting MISP Objects. [Raphaël Vinot]
- ChangeLog updated to the latest version. [Alexandre Dulaunoy]
v2.4.79 (2017-08-25)
--------------------
New
~~~
- Add ZMQ publishing method. [Hannah Ward]
Other
~~~~~
- Version bump. [Raphaël Vinot]
- Exact match on the value when adding tag. [Raphaël Vinot]
- Merge pull request #105 from Deventual/patch-10. [Alexandre Dulaunoy]
Update README.md
- Update README.md. [Deventual]
- Improve event ID detection in publish method. [Raphaël Vinot]
- Merge branch 'patch-8' of https://github.com/Deventual/PyMISP into
Deventual-patch-8. [Raphaël Vinot]
- Update api.py. [Deventual]
- Implemented much faster publish method to replace the old one.
[Deventual]
new publish method that is less resourceful and also having the ability to send emails (same as the web interface).
The method depends on the publish misp api method instead of update.
- Update path to roles API. [Raphaël Vinot]
- Fix typo in variable name. [Raphaël Vinot]
- Merge pull request #99 from edhoedt/patch-1. [Raphaël Vinot]
Fixing undefined ressources_path
- Fixing undefined ressources_path. [edhoedt]
- Allow to load the event_id in MISPAttrbute. [Raphaël Vinot]
- Doesn't require describe_types in MISPAttribute's constructor.
[Raphaël Vinot]
- Merge pull request #98 from wagner-certat/fix-shebang-exec. [Raphaël
Vinot]
Fix shebangs and executable permissions
- Fix shebangs and executable permissions. [Sebastian Wagner]
Files containing a shebang should be executable (examples/*.py)
Non-executable files should not contain a shebang (pymisp/...)
spotted with rpmlint
- Fix typo in the method name. [Raphaël Vinot]
- Update describe types. [Raphaël Vinot]
- Improve document generation. [Raphaël Vinot]
- Add test of the authkey, update warnings. [Raphaël Vinot]
- Remove useless import. [Raphaël Vinot]
- Search paramaters validation. [Raphaël Vinot]
Fix #96
- Allow to pass a bytestream to upload_sample. [Raphaël Vinot]
Fix #101
- Add sample for get_attachment. [Raphaël Vinot]
- Fix get_attachment. [Raphaël Vinot]
Fix #105
- Update describeTypes.json. [Raphaël Vinot]
- Allow to list roles and tags on a MISP instance. [Raphaël Vinot]
- Improve errors flattening. [Raphaël Vinot]
v2.4.77 (2017-07-12)
--------------------
New
~~~
- Added changelog in-repo fixes #75. [Hannah Ward]
- Enable async option for search() [Hannah Ward]
- Added async method for search_index. [Hannah Ward]
- Added base async imports. [Hannah Ward]
Fix
~~~
- If array passed to add_attrib, add each individually. [Hannah Ward]
- Don't even bother trying with futuressession if Async isn't ok fixes
#85. [Hannah Ward]
- Added docstring for search. [Hannah Ward]
- Add docstring for asynch. [Hannah Ward]
- Can't instantiate basestring fixes #76. [Hannah Ward]
Other
~~~~~
- Version bump. [Raphaël Vinot]
- Avoid a comment set to NoneNone. [Raphaël Vinot]
Fix https://github.com/MISP/misp-modules/issues/127
- Merge pull request #110 from spacepatcher/master. [Raphaël Vinot]
Add handling a string response
- Merge pull request #1 from spacepatcher/spacepatcher-patch-api. [Alex
Bolshakov]
Add handling a string response
- Add handling a string response. [Alex Bolshakov]
To avoid AttributeError when variable to_return is a string with a value "Pull queued for background execution."
- Simplfy MISPEvent.add_attribute. [Raphaël Vinot]
- Revert "Simplfy MISPEvent.add_attribute" [Raphaël Vinot]
This reverts commit f64f42ac71c11349c1f7dcfc5bf4b2d7c55a0e25.
- Simplfy MISPEvent.add_attribute. [Raphaël Vinot]
- Revert "Fix OpenIOC import" [Raphaël Vinot]
This reverts commit acd6d8b0523963baecb3b6e8f4c77b1466045dd4.
- Fix OpenIOC import. [Raphaël Vinot]
- Merge branch 'master' of github.com:CIRCL/PyMISP. [Raphaël Vinot]
- Merge pull request #109 from raw-data/master. [Raphaël Vinot]
Fix suricata_search and new PyMISP methods
- Exposing more feeds functions (for which _isRest() is available) to
the API. [raw-data]
- Fix args.quiet and status msgs. [raw-data]
- Merge pull request #95 from obsidianpentesting/master. [Raphaël Vinot]
Create cache feeds function in PyMISP
- Example script to invoke the cache_all_feeds() from PyMISP.
[obsidianpentesting]
- Simple function to cache all feeds at once. This is almost identical
to fetch_feed. In the future, I would like to specify the scope to
include other values. [obsidianpentesting]
- Doc version updated to 2.4.71. [Alexandre Dulaunoy]
- Merge pull request #107 from raw-data/master. [Alexandre Dulaunoy]
multi-threaded suricata search
- Add multithreaded suricata search code, fetching ids rules based on
parameters and terms. [raw-data]
- Merge branch 'master' of github.com:CIRCL/PyMISP. [Alexandre Dulaunoy]
- Merge pull request #106 from deralexxx/patch-3. [Raphaël Vinot]
use misp_verifycert
- Use misp_verifycert. [Alexander J]
from keys.py
- Merge pull request #102 from aparriel/debug-fix. [Raphaël Vinot]
Fix missing %s in debug
- Fix missing %s in debug. [aparriel]
Missing %s in logger.debug call lead to error.
- Merge pull request #92 from deralexxx/patch-4. [Alexandre Dulaunoy]
use misp_verifycert
- Use misp_verifycert. [Alexander J]
misp_verifycert
- Merge pull request #93 from deralexxx/patch-6. [Alexandre Dulaunoy]
Create README.md
- Create README.md. [Alexander J]
- Add support for freetext import in the API. [Raphaël Vinot]
- Typo fixed. [Alexandre Dulaunoy]
Paris is not the center of the world as the idiot of the World village
would said.
- Merge pull request #100 from CheYenBzh/master. [Alexandre Dulaunoy]
Automation for fetching all events from a feed
- Create fetch_events_feed.py. [CheYenBzh]
- Add function to fetch all events from a feed. [CheYenBzh]
Function takes the feed id as argument (-f).
- Make pep8 happy. [Raphaël Vinot]
- Merge pull request #88 from kajogo777/87. [Raphaël Vinot]
Fix not_values type check in __prepare_rest_search issue #87
- Fix not_values type check in __prepare_rest_search. [George]
- Merge pull request #84 from truckydev/master. [Raphaël Vinot]
correction, refactoring, addition
- Correction for https://travis-ci.org/MISP/misp-modules/jobs/231065469.
[Tristan METAYER]
code refactoring
add new composite
- Cleanup warning function. [Raphaël Vinot]
- Fix typos. [Raphaël Vinot]
- Merge pull request #82 from truckydev/master. [Raphaël Vinot]
add mapping and composite feature
- Remove unused variable. [Tristan METAYER]
- Remove category It will be automaticly detected
https://github.com/MISP/PyMISP/blob/master/pymisp/tools/openioc.py.
[Tristan METAYER]
- Revert tab to escape. [Tristan METAYER]
- Ajout de mapping Ajout de la prise en compte d'autre composite.
[Tristan METAYER]
- Merge pull request #83 from bernhl/fix_api_version_check. [Raphaël
Vinot]
Fix checks of recommended version
- Fix checks of recommended version. [Lukas Bernhard]
- Merge pull request #81 from bernhl/logging. [Raphaël Vinot]
Use logging instead of print; deprecate debug param
- Merge branch 'master' into logging. [Raphaël Vinot]
- Merge pull request #80 from bernhl/exception_types. [Raphaël Vinot]
Add exception types to api.py
- Add exception types to api.py. [fluxas]
- Use logging instead of print; deprecate debug param. [fluxas]
- Merge branch 'master' of github.com:MISP/PyMISP. [Hannah Ward]
- Merge pull request #79 from PaulSec/master. [Raphaël Vinot]
Normalize output between misp.search_index and misp.search
- Normalize output between misp.search_index and misp.search Fix issue:
https://github.com/CIRCL/PyMISP/issues/78. [Paul A]
- Merge pull request #77 from PaulSec/master. [Raphaël Vinot]
Fixed the JSON output format (\n breaks JSON loading afterwards)
- Fixed the JSON output format (\n breaks JSON loading afterwards) [Paul
A]
- Merge branch 'async' [Hannah Ward]
- Merge branch 'master' of github.com:MISP/PyMISP. [Hannah Ward]
- Add: gitchangelogrc configuration file added. [Alexandre Dulaunoy]
- Quick and dirty fix for #97. [Raphaël Vinot]
- Update offline tests. [Raphaël Vinot]
- Fix testing. [Raphaël Vinot]
- Merge pull request #74 from SekoiaLab/test/unitTests. [Raphaël Vinot]
test: add test for user and organisation
- Test: add test for user and organisation. [Adrien RAFFIN]
This is a proposition of test to create a user and an organisation in MISP
- Allow to pass some parameters as False or 0. [Raphaël Vinot]