- Added query.BinnedColumn so you can group by time buckets
- Better STIX extension property support - Add a new __columns "private" table to store mapping from object path to column name - New path/prop metadata functions to supply metadata about STIX properties
- Improved STIX
process
"deterministic"id
generation - Use a unique ID from extension properties, if found - Use relatedx-oca-asset
hostname or ID if available
- Add
splint convert
command to convert some logs files to STIX bundles
- Use a "normalized" SQL database
- Initial STIX 2.1 support
New assign_query API, minor query API improvements
- new way to create views via assign_query
- can now init a Query with a list instead of calling append
- Some SQL injection protection in query classes
- Better support for grouped data
- First stable release
- Concurrency fixes in
cache()
- First release on PyPI.