/
CHANGELOG.txt
1816 lines (1458 loc) · 66.2 KB
/
CHANGELOG.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
Changelog
=========
v2.4.85.1 (2018-01-10)
----------------------
Changes
~~~~~~~
- Bump version. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Cleanup from last commit. [Raphaël Vinot]
- Move MISPTag to Abstract MISP. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Fix tests (new template version) [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Add test for loading existing malware sample from MISP. [Raphaël
Vinot]
- Multiple changes. [Raphaël Vinot]
* Fix timestamp dump (properly enforce UTC)
* Properly handle proposals
* Add many getter/setter
* Add dedicated test cases for MISPEvent and other objects
- Allow do pass a category in default_attributes_parameters for object.
[Raphaël Vinot]
fix #166
- Default for sharing_group_id is 0. [Raphaël Vinot]
- Add MISPSighting class. [Raphaël Vinot]
- Bump Changelog. [Raphaël Vinot]
Fix
~~~
- Edited method works as expected, add tests. [Raphaël Vinot]
- Forgotten test files in last commit... [Raphaël Vinot]
- Disable_correlation from template not properly used. [Raphaël Vinot]
- Don't remove the distribution and sharing_group_id from
default_attributes_parameters. [Raphaël Vinot]
- The sharing_group_id isn't required. [Raphaël Vinot]
- Last commit was broken... [Raphaël Vinot]
- Properly set Tag to attributes within objects. [Raphaël Vinot]
- Add method to add tags to objects. [Raphaël Vinot]
Fix #160
- Typo in set_sightings. [Raphaël Vinot]
Fix #161
Other
~~~~~
- Merge pull request #164 from MISP/refactor. [Raphaël Vinot]
chg: Multiple changes
- Merge pull request #162 from AninaAntonie/patch-1. [Raphaël Vinot]
fix: set_sightings
- Set_sightings. [AninaAntonie]
Maybe I didn't use it correctly but the method set_sightings didn't work for me. It's working now but I'm not sure whether sending a request for every sighting in the list is the best solution.
- Merge pull request #165 from dadokkio/master. [Raphaël Vinot]
_default_attributes_parameters - if set - is a dict
- _default_attributes_parameters - if set - is a dict. [Arcuri Davide]
Manage distribution and sharing_group_id as dict key like the other fields.
-- Not sure about default
v2.4.85 (2017-12-22)
--------------------
New
~~~
- Add last field to get_csv. [Raphaël Vinot]
- (hopefully) Cleverer handling of timestamps in the objects. [Raphaël
Vinot]
& some cleanup
Changes
~~~~~~~
- Bump misp-objects. [Raphaël Vinot]
- Version bump. [Raphaël Vinot]
- Update documentation. [Raphaël Vinot]
- Update documentation, cleanup. [Raphaël Vinot]
- Bump describeTypes.json. [Raphaël Vinot]
- Validate attributes in attributes.setter. [Raphaël Vinot]
- Add get_attribute_tag method at MISPEvent level. [Raphaël Vinot]
Also add a MISPTag class for consistency.
- Bump misp-objects. [Raphaël Vinot]
- Bump describeTypes. [Raphaël Vinot]
- Add __repr__ methods (fix last commit) [Raphaël Vinot]
- Add __repr__ methods. [Raphaël Vinot]
- Use new format for filtering. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump describeTypes. [Raphaël Vinot]
Fix
~~~
- Properly use the edited flag. [Raphaël Vinot]
- Add setter for Attribute in MISPEvent. [Raphaël Vinot]
- Forgotten calls to master class. [Raphaël Vinot]
- Properly call datetime.datetime.utcfromtimestamp. [Raphaël Vinot]
- Fix typo. [Raphaël Vinot]
- Fix python2.7 support. [Raphaël Vinot]
- Initialize default class parameters. [Raphaël Vinot]
Fix #155
Other
~~~~~
- Merge branch 'cvandeplas-master' [Raphaël Vinot]
- Merge branch 'master' of https://github.com/cvandeplas/PyMISP into
cvandeplas-master. [Raphaël Vinot]
- Merge remote-tracking branch 'MISP/master' [Christophe Vandeplas]
- Fix MISPObject missing distribution and sharing_group_id. [Christophe
Vandeplas]
- fix MISPObject missing distribution concept
- fix language typo paramaters => parameters
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #156 from cvandeplas/master. [Alexandre Dulaunoy]
document submodule downloading
- Document submodule downloading. [Christophe Vandeplas]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #154 from wagner-certat/inc-meta. [Raphaël Vinot]
Include documentation and examples in source dist
- Include documentation and examples in source dist. [Sebastian Wagner]
v2.4.84 (2017-12-13)
--------------------
New
~~~
- Add methods to get taxonomy(ies) [Raphaël Vinot]
Thanks to @truckydev
- Add method to get all the events modified in an interval. [Raphaël
Vinot]
Changes
~~~~~~~
- Bump misp-objects. [Raphaël Vinot]
- Bump Changelog. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Make the library easier to use. [Raphaël Vinot]
- Allow to pass a pseudofile to LIEF. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Update changelog. [Raphaël Vinot]
Fix
~~~
- Disable pseudofile support in py2, skip tests. [Raphaël Vinot]
- Typo in error output text description. [Eric Jaw]
Other
~~~~~
- Merge pull request #151 from MISP/refactor. [Raphaël Vinot]
chg: Make the library easier to use
- Merge pull request #150 from sdrees/first-friendly-contribution-
enhance-coverage. [Raphaël Vinot]
First friendly contribution enhance coverage
- Further tests added (for public methods) [Stefan Hagen (Individual)]
- Changed asserts from dict usecases to set comparison to workaround non
3.6 behavior. [Stefan Hagen (Individual)]
- Merge branch 'master' of https://github.com/MISP/PyMISP into first-
friendly-contribution-enhance-coverage. [Stefan Hagen (Individual)]
- Enhance coverage and fix en passant with focus on api. [Stefan Hagen
(Individual)]
- Merge branch 'truckydev-get_last_modified_event' [Raphaël Vinot]
- Merge branch 'get_last_modified_event' of
https://github.com/truckydev/PyMISP into truckydev-
get_last_modified_event. [Raphaël Vinot]
- - Correction for 'last' param. 'last' gives the latest events that
have been published - add get_events_last_modified() this function
returns the modified events based on timestamp. [Tristan METAYER]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #149 from naisanza/master. [Raphaël Vinot]
fix: Typo in error output text description
v2.4.83 (2017-12-06)
--------------------
New
~~~
- Add get CSV method. [Raphaël Vinot]
Changes
~~~~~~~
- Allow to pass a proxy to query VT. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump version to 2.4.83. [Raphaël Vinot]
- Do not get the event from the server before publishing if
PyMISP.publish gets an ID. [Raphaël Vinot]
- Add live tests for recommended pymisp version and describeTypes up-to-
date. [Raphaël Vinot]
- Add a way to check if the ACL is up-to-date. [Raphaël Vinot]
- Add validators for describeTypes on the live instance. [Raphaël Vinot]
- Update PDF link to doc. [Raphaël Vinot]
- Add example file to push OpenIOC file to MISP. [Raphaël Vinot]
chg: Add some imports in the tool's init file
- Bump misp-objects. [Raphaël Vinot]
- Change version number to master in the doc. [Raphaël Vinot]
- Add new objects: MISPUser and MISPOrganisation. [Raphaël Vinot]
- Add a generic MISP object generator. [Raphaël Vinot]
- Allow to add multiple attribute of the same type. [Raphaël Vinot]
- Add fast publish method. [Raphaël Vinot]
Fix #86
- Improve documentation. [Raphaël Vinot]
Fix #121
Fix
~~~
- Typo in the tests. [Raphaël Vinot]
- Typo in live tests. [Raphaël Vinot]
- Bump describeTypes.json. [Raphaël Vinot]
Add testing
Other
~~~~~
- Merge pull request #147 from StrayLightning/master. [Raphaël Vinot]
Check explicitly for a 500 response from the server with no response content
- Improve the exception message for a server 500+ response with no
response content. [StrayLightning]
- Check for zero-length 500 response from the server and produce a
suitable error message. [StrayLightning]
In experimenting with PyMISP I am triggering problems on the server I
am using. Occasionally the server will return a 500 response with a
message indicating an internal error, but more often than not it returns
a 500 response with no contents, and _check_response falls over itself,
generating hard-to-fathom exception from the json internals.
This commit hardens _check_response by detecting zero-length responses
and raising a suitable exception.
Also fix a missing bracket in one of the subsequent exception strings.
- Merge pull request #146 from c-goes/lief_integrity_exception. [Raphaël
Vinot]
Make FileObject creation work if lief parsing fails
- Make FileObject creation work if lief parsing fails. [c-goes]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #144 from c-goes/objects_delete. [Raphaël Vinot]
allow deletion of objects and object references
- Allow deletion of objects and object references. [c-goes]
- Update doc badge links. [Raphaël Vinot]
- Merge pull request #143 from 3c7/feature/send_attributes. [Raphaël
Vinot]
Adding multiple named attributes (without proposal) require a single POST request now
- Adding multiple named attributes require a single POST request now.
[3c7]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #142 from c-goes/master. [Raphaël Vinot]
replaced is_digit() with isdigit()
- Fixed typo. [c-goes]
- Merge remote-tracking branch 'upstream/master' [c-goes]
- Merge pull request #141 from SteveClement/master. [Raphaël Vinot]
Remove CIRCL repo references from README.md & fix epydoc
- - Remove CIRCL reference from README.md - Updated 2 bad indentations
where epydoc was Warning. [Steve Clement]
- Merge remote-tracking branch 'upstream/master' [c-goes]
- Merge branch 'master' of https://github.com/MISP/PyMISP into
messageidtype. [c-goes]
- Added default_category for email-message-id. [c-goes]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge branch 'feature/feedgenerator_rework' [iglocska]
- Merge branch 'master' of https://github.com/MISP/PyMISP into
feature/feedgenerator_rework. [iglocska]
- Rework of the feed generator. [iglocska]
- use objects, attribute tags and object references correctly
- generate quickhashlist for fast lookups / future MISP caching mechanism
- saner structure (herp-a-derp)
v2.4.82 (2017-11-09)
--------------------
New
~~~
- Proper debug system. [Raphaël Vinot]
Make it easy to investigate the json blobs sent to the server.
Changes
~~~~~~~
- Bump PyMISP version. [Raphaël Vinot]
- Bump CHANGELOG. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Update readme for new logging system. [Raphaël Vinot]
- Small improvments in the logging system. [Raphaël Vinot]
- Properly use python logging module. [Raphaël Vinot]
- Update asciidoctor generator. [Raphaël Vinot]
- Remove warning if PyMISP is too new. [Raphaël Vinot]
- Add simple asciidoc generator for MISP event. [Raphaël Vinot]
- Update changelog. [Raphaël Vinot]
Fix
~~~
- Typo loger -> logger. [Raphaël Vinot]
- Let load unknown object relations in known templates. [Raphaël Vinot]
This isn't recommended, but happens very often.
- Allow to load non-malware ZIP files in MISP Event. [Raphaël Vinot]
Prior to his patch, any zip file loaded by MISP Event was unpacked and
processed as an excrypted malware from MISP.
- Properly pass the distribution when uploading a sample. [Raphaël
Vinot]
- Properly upload a sample in an existing event. [Raphaël Vinot]
Fix https://github.com/MISP/PyMISP/issues/123
- Properly set the distribution at event level. [Raphaël Vinot]
fix #120
- Properly pop the distribution key. [Raphaël Vinot]
- Update dependencies for VT generator. [Raphaël Vinot]
Other
~~~~~
- Merge pull request #126 from CenturyLinkCIRT/master. [Raphaël Vinot]
Added vt_to_misp.py example and VTReportObject
- Merge branch 'master' of https://github.com/MISP/PyMISP. [Thomas
Gardner]
- Fix test suite. [Raphaël Vinot]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #122 from LDO-CERT/master. [Raphaël Vinot]
Created add_generic_object.py
- Created add_generic_object.py. [garanews]
usage: add_generic_object.py [-h] -e EVENT -t TYPE -d DICT
Examples:
python3 add_generic_object.py -e 1683 -t email -d '{"subject":"The Pink Letter", "to":"jon@snow.org"}'
python3 add_generic_object.py -e 2343 -t person -d '{"first-name":"Daenerys", "last-name":"Targaryen", "place-of-birth":"Dragonstone"}'
python3 add_generic_object.py -e 3596 -t "domain|ip" -d '{"domain":"stormborn.org", "ip":"50.63.202.33"}'
- Added vtreportobject and vt_to_misp example. [Thomas Gardner]
- Created add_generic_object.py. [garanews]
usage: add_generic_object.py [-h] -e EVENT -t TYPE -d DICT
Examples:
python3 add_generic_object.py -e 1683 -t email -d '{"subject":"The Pink Letter", "to":"jon@snow.org"}'
python3 add_generic_object.py -e 2343 -t person -d '{"first-name":"Daenerys", "last-name":"Targaryen", "place-of-birth":"Dragonstone"}'
python3 add_generic_object.py -e 3596 -t "domain|ip" -d '{"domain":"stormborn.org", "ip":"50.63.202.33"}'
v2.4.81.2 (2017-10-24)
----------------------
Changes
~~~~~~~
- Version bump. [Raphaël Vinot]
- Update changelog. [Raphaël Vinot]
Fix
~~~
- Properly bundle object templates. [Raphaël Vinot]
v2.4.81.1 (2017-10-24)
----------------------
Changes
~~~~~~~
- Bump version. [Raphaël Vinot]
- Do not raise an exception when the object template is unknown.
[Raphaël Vinot]
+ bump misp-object
- Bump misp-objects. [Raphaël Vinot]
- Allow to hard delete an attribute by ID. [Raphaël Vinot]
- Update comments. [Raphaël Vinot]
- Bump misp-objects and describeTypes. [Raphaël Vinot]
Fix
~~~
- Properly bundle object templates. [Raphaël Vinot]
- Fix typos and logic mistakes in mispevent. [Raphaël Vinot]
- Fix travis build. [Raphaël Vinot]
- Min required version of setuptools. [Raphaël Vinot]
- Improve dependencies listing. [Raphaël Vinot]
Partial fix for #110
- Missing default category. [Raphaël Vinot]
Fix #119
Other
~~~~~
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Update openioc.py. [Andras Iklody]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #121 from kx499/master. [Raphaël Vinot]
Added **kwargs to add_named_attribute call in add_attachment
- Added **kwargs to add_named_attribute call in add_attachment.
[tssbo82]
- Update README. [Raphaël Vinot]
- Update changelog. [Raphaël Vinot]
v2.4.81 (2017-10-09)
--------------------
Fix
~~~
- Changelog config + update. [Raphaël Vinot]
Other
~~~~~
- Up: bump version. [Raphaël Vinot]
- Up: Bump misp-objects. [Raphaël Vinot]
v2.4.80.1 (2017-10-04)
----------------------
Changes
~~~~~~~
- Update changelog. [Raphaël Vinot]
Fix
~~~
- Change readme. [Raphaël Vinot]
- Create file object. [Raphaël Vinot]
Was broken in case the file was neither PE/ELF/Mach-O
- Allow again to tag/delete unsaved attributes. [Raphaël Vinot]
- Live tests. [Raphaël Vinot]
- Import the openioc converter from tool again. [Raphaël Vinot]
Other
~~~~~
- Up: Version bump. [Raphaël Vinot]
- Up: Bump misp-objects & describeTypes. [Raphaël Vinot]
- Update readme. [Raphaël Vinot]
- Merge pull request #116 from cgi1/patch-2. [Raphaël Vinot]
Similar to #114 on attribute level
- Similar to #114 on attribute level. [cgi1]
`add_attribute_tag(tag,attribute_identifier)` fails if attribute does not have any tag in before.
- Merge pull request #115 from cgi1/patch-1. [Raphaël Vinot]
Fixing #114 (MISPEvent.add_tag(tag) fails if inital event does not contain tag )
- Fixing #114. [cgi1]
- Merge pull request #112 from CenturyLinkCIRT/unknown-object-name-
patch. [Raphaël Vinot]
Formatted "Unknown MISP object" error message
- Formatted "Unknown MISP object" error message. [infosec-intern]
When a user tries to add an object with a name that doesn't exist, the error thrown was missing its format string
This ended up looking like
pymisp.exceptions.UnknownMISPObjectTemplate: {} is unknown in the MISP object directory.
Here's a patch that adds self.name to the format string
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #111 from wagner-certat/skip-tests. [Raphaël Vinot]
- TST: skip test with optional files if not existing. [Sebastian Wagner]
- TST: update test requirements. [Sebastian Wagner]
- Update: make make_binary_objects more flexible. [Raphaël Vinot]
fix: use proper exception handlers
v2.4.80 (2017-09-18)
--------------------
- Properly initialize a new malware sample. [Raphaël Vinot]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Permission issue... [Alexandre Dulaunoy]
- Merge branch 'objects' [Raphaël Vinot]
- Bump misp object. [Raphaël Vinot]
- Allow to get the list of known types out of MISPEvent again. [Raphaël
Vinot]
- Merge branch 'objects' of github.com:MISP/PyMISP into objects.
[Raphaël Vinot]
- Changed source => object / destination => referenced. [iglocska]
- Use MISPAbstract as a master class everywhere. [Raphaël Vinot]
This is probably breaking everything.... ¯\_(ツ)_/¯
- Bump miso-objects. [Raphaël Vinot]
- Changed two fields in object references. [iglocska]
- source_uuid => object_uuid
- destination_uuid => referenced_uuid
- Some more refactoring. [Raphaël Vinot]
- Some more refactoring and cleanup. [Raphaël Vinot]
- Update object definitions. [Raphaël Vinot]
- Update PE generator. [Raphaël Vinot]
- Refactoring in order to load objects. [Raphaël Vinot]
- Add support for multiple entries of the same type in an object.
[Raphaël Vinot]
- Remove some python versions from travis. [Raphaël Vinot]
- Do not try to run code requiring lief. [Raphaël Vinot]
- Remove ImportError. [Raphaël Vinot]
- Install deps in travis. [Raphaël Vinot]
- Update tests. [Raphaël Vinot]
- Do not fail if pymisp is not installed. [Raphaël Vinot]
- Add support for ELF and MachO objects. [Raphaël Vinot]
- Update get_template_id, cleanup. [Raphaël Vinot]
- Refactor all the things. [Raphaël Vinot]
Add script for MISP core, make everything generic.
- Fixing undefined ressources_path. [edhoedt]
- Update function names in mispevent. [Raphaël Vinot]
- Re-enable python < 3.5 support. [Raphaël Vinot]
- Update file/pe/pe-sections objects creator. [Raphaël Vinot]
- Doesn't require describe_types in MISPAttribute's constructor.
[Raphaël Vinot]
- Update accordingly to the current server implementation. [Raphaël
Vinot]
- Re-enable python2 support... [Raphaël Vinot]
- Initial commit supporting MISP Objects. [Raphaël Vinot]
- ChangeLog updated to the latest version. [Alexandre Dulaunoy]
v2.4.79 (2017-08-25)
--------------------
New
~~~
- Add ZMQ publishing method. [Hannah Ward]
Other
~~~~~
- Version bump. [Raphaël Vinot]
- Exact match on the value when adding tag. [Raphaël Vinot]
- Merge pull request #105 from Deventual/patch-10. [Alexandre Dulaunoy]
Update README.md
- Update README.md. [Deventual]
- Improve event ID detection in publish method. [Raphaël Vinot]
- Merge branch 'patch-8' of https://github.com/Deventual/PyMISP into
Deventual-patch-8. [Raphaël Vinot]
- Update api.py. [Deventual]
- Implemented much faster publish method to replace the old one.
[Deventual]
new publish method that is less resourceful and also having the ability to send emails (same as the web interface).
The method depends on the publish misp api method instead of update.
- Update path to roles API. [Raphaël Vinot]
- Fix typo in variable name. [Raphaël Vinot]
- Merge pull request #99 from edhoedt/patch-1. [Raphaël Vinot]
Fixing undefined ressources_path
- Fixing undefined ressources_path. [edhoedt]
- Allow to load the event_id in MISPAttrbute. [Raphaël Vinot]
- Doesn't require describe_types in MISPAttribute's constructor.
[Raphaël Vinot]
- Merge pull request #98 from wagner-certat/fix-shebang-exec. [Raphaël
Vinot]
Fix shebangs and executable permissions
- Fix shebangs and executable permissions. [Sebastian Wagner]
Files containing a shebang should be executable (examples/*.py)
Non-executable files should not contain a shebang (pymisp/...)
spotted with rpmlint
- Fix typo in the method name. [Raphaël Vinot]
- Update describe types. [Raphaël Vinot]
- Improve document generation. [Raphaël Vinot]
- Add test of the authkey, update warnings. [Raphaël Vinot]
- Remove useless import. [Raphaël Vinot]
- Search paramaters validation. [Raphaël Vinot]
Fix #96
- Allow to pass a bytestream to upload_sample. [Raphaël Vinot]
Fix #101
- Add sample for get_attachment. [Raphaël Vinot]
- Fix get_attachment. [Raphaël Vinot]
Fix #105
- Update describeTypes.json. [Raphaël Vinot]
- Allow to list roles and tags on a MISP instance. [Raphaël Vinot]
- Improve errors flattening. [Raphaël Vinot]
v2.4.77 (2017-07-12)
--------------------
New
~~~
- Added changelog in-repo fixes #75. [Hannah Ward]
- Enable async option for search() [Hannah Ward]
- Added async method for search_index. [Hannah Ward]
- Added base async imports. [Hannah Ward]
Fix
~~~
- If array passed to add_attrib, add each individually. [Hannah Ward]
- Don't even bother trying with futuressession if Async isn't ok fixes
#85. [Hannah Ward]
- Added docstring for search. [Hannah Ward]
- Add docstring for asynch. [Hannah Ward]
- Can't instantiate basestring fixes #76. [Hannah Ward]
Other
~~~~~
- Version bump. [Raphaël Vinot]
- Avoid a comment set to NoneNone. [Raphaël Vinot]
Fix https://github.com/MISP/misp-modules/issues/127
- Merge pull request #110 from spacepatcher/master. [Raphaël Vinot]
Add handling a string response
- Merge pull request #1 from spacepatcher/spacepatcher-patch-api. [Alex
Bolshakov]
Add handling a string response
- Add handling a string response. [Alex Bolshakov]
To avoid AttributeError when variable to_return is a string with a value "Pull queued for background execution."
- Simplfy MISPEvent.add_attribute. [Raphaël Vinot]
- Revert "Simplfy MISPEvent.add_attribute" [Raphaël Vinot]
This reverts commit f64f42ac71c11349c1f7dcfc5bf4b2d7c55a0e25.
- Simplfy MISPEvent.add_attribute. [Raphaël Vinot]
- Revert "Fix OpenIOC import" [Raphaël Vinot]
This reverts commit acd6d8b0523963baecb3b6e8f4c77b1466045dd4.
- Fix OpenIOC import. [Raphaël Vinot]
- Merge branch 'master' of github.com:CIRCL/PyMISP. [Raphaël Vinot]
- Merge pull request #109 from raw-data/master. [Raphaël Vinot]
Fix suricata_search and new PyMISP methods
- Exposing more feeds functions (for which _isRest() is available) to
the API. [raw-data]
- Fix args.quiet and status msgs. [raw-data]
- Merge pull request #95 from obsidianpentesting/master. [Raphaël Vinot]
Create cache feeds function in PyMISP
- Example script to invoke the cache_all_feeds() from PyMISP.
[obsidianpentesting]
- Simple function to cache all feeds at once. This is almost identical
to fetch_feed. In the future, I would like to specify the scope to
include other values. [obsidianpentesting]
- Doc version updated to 2.4.71. [Alexandre Dulaunoy]
- Merge pull request #107 from raw-data/master. [Alexandre Dulaunoy]
multi-threaded suricata search
- Add multithreaded suricata search code, fetching ids rules based on
parameters and terms. [raw-data]
- Merge branch 'master' of github.com:CIRCL/PyMISP. [Alexandre Dulaunoy]
- Merge pull request #106 from deralexxx/patch-3. [Raphaël Vinot]
use misp_verifycert
- Use misp_verifycert. [Alexander J]
from keys.py
- Merge pull request #102 from aparriel/debug-fix. [Raphaël Vinot]
Fix missing %s in debug
- Fix missing %s in debug. [aparriel]
Missing %s in logger.debug call lead to error.
- Merge pull request #92 from deralexxx/patch-4. [Alexandre Dulaunoy]
use misp_verifycert
- Use misp_verifycert. [Alexander J]
misp_verifycert
- Merge pull request #93 from deralexxx/patch-6. [Alexandre Dulaunoy]
Create README.md
- Create README.md. [Alexander J]
- Add support for freetext import in the API. [Raphaël Vinot]
- Typo fixed. [Alexandre Dulaunoy]
Paris is not the center of the world as the idiot of the World village
would said.
- Merge pull request #100 from CheYenBzh/master. [Alexandre Dulaunoy]
Automation for fetching all events from a feed
- Create fetch_events_feed.py. [CheYenBzh]
- Add function to fetch all events from a feed. [CheYenBzh]
Function takes the feed id as argument (-f).
- Make pep8 happy. [Raphaël Vinot]
- Merge pull request #88 from kajogo777/87. [Raphaël Vinot]
Fix not_values type check in __prepare_rest_search issue #87
- Fix not_values type check in __prepare_rest_search. [George]
- Merge pull request #84 from truckydev/master. [Raphaël Vinot]
correction, refactoring, addition
- Correction for https://travis-ci.org/MISP/misp-modules/jobs/231065469.
[Tristan METAYER]
code refactoring
add new composite
- Cleanup warning function. [Raphaël Vinot]
- Fix typos. [Raphaël Vinot]
- Merge pull request #82 from truckydev/master. [Raphaël Vinot]
add mapping and composite feature
- Remove unused variable. [Tristan METAYER]
- Remove category It will be automaticly detected
https://github.com/MISP/PyMISP/blob/master/pymisp/tools/openioc.py.
[Tristan METAYER]
- Revert tab to escape. [Tristan METAYER]
- Ajout de mapping Ajout de la prise en compte d'autre composite.
[Tristan METAYER]
- Merge pull request #83 from bernhl/fix_api_version_check. [Raphaël
Vinot]
Fix checks of recommended version
- Fix checks of recommended version. [Lukas Bernhard]
- Merge pull request #81 from bernhl/logging. [Raphaël Vinot]
Use logging instead of print; deprecate debug param
- Merge branch 'master' into logging. [Raphaël Vinot]
- Merge pull request #80 from bernhl/exception_types. [Raphaël Vinot]
Add exception types to api.py
- Add exception types to api.py. [fluxas]
- Use logging instead of print; deprecate debug param. [fluxas]
- Merge branch 'master' of github.com:MISP/PyMISP. [Hannah Ward]
- Merge pull request #79 from PaulSec/master. [Raphaël Vinot]
Normalize output between misp.search_index and misp.search
- Normalize output between misp.search_index and misp.search Fix issue:
https://github.com/CIRCL/PyMISP/issues/78. [Paul A]
- Merge pull request #77 from PaulSec/master. [Raphaël Vinot]
Fixed the JSON output format (\n breaks JSON loading afterwards)
- Fixed the JSON output format (\n breaks JSON loading afterwards) [Paul
A]
- Merge branch 'async' [Hannah Ward]
- Merge branch 'master' of github.com:MISP/PyMISP. [Hannah Ward]
- Add: gitchangelogrc configuration file added. [Alexandre Dulaunoy]
- Quick and dirty fix for #97. [Raphaël Vinot]
- Update offline tests. [Raphaël Vinot]
- Fix testing. [Raphaël Vinot]
- Merge pull request #74 from SekoiaLab/test/unitTests. [Raphaël Vinot]
test: add test for user and organisation
- Test: add test for user and organisation. [Adrien RAFFIN]
This is a proposition of test to create a user and an organisation in MISP
- Allow to pass some parameters as False or 0. [Raphaël Vinot]
When creating or updating users and organisations
Fix #70
- Use POST instead of get in search_index. [Raphaël Vinot]
Fix #73
- Fix typos and pep8. [Raphaël Vinot]
v2.4.71 (2017-04-11)
--------------------
Fix
~~~
- Pass disable_correlation flag from add_attribute. [Hannah Ward]
- Add default values for mandatory variable. [Adrien RAFFIN]
- Org_type was not the correct variable. [Adrien RAFFIN]
- Raise exception if uuid not setted in remote org. [Adrien RAFFIN]
- Update script had `latest`'s docstrings. [Hannah Ward]
- Don't double-json-encode when sending proposals. [Hannah Ward]
- Entrypt isn't a word! fixes #59. [Hannah Ward]
Other
~~~~~
- Update types. [Raphaël Vinot]
- Version Dump. [Raphaël Vinot]
- Merge pull request #69 from SekoiaLab/fix/serverCreation. [Raphaël
Vinot]
Fix/server creation
- Merge pull request #71 from SekoiaLab/fix/remoteOrgUUID. [Raphaël
Vinot]
fix: raise exception if uuid not setted in remote org
- Merge pull request #72 from SekoiaLab/feat/getAllOrganisations.
[Raphaël Vinot]
feat: add filter to specify which organisation to list
- Feat: add filter to specify which organisation to list. [Adrien
RAFFIN]
- Update validation. [Raphaël Vinot]
* Allow strict validation
* Add workaround to avoid all JSON dumps from MISP <=2.4.70 to fail
- Update test file. [Raphaël Vinot]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge branch 'master' of github.com:MISP/PyMISP. [Hannah Ward]
- Merge pull request #68 from PaulSec/patch-1. [Raphaël Vinot]
Updated last.py to dump json results straight away
- Update last.py. [Paul]
- Updated last.py to dump json results straight away. [Paul]
Output was not usable with cli utilities such as: ```cat results.json | python -m simplejson.tool```.
It's now usable and works perfectly.
- Merge branch 'master' of github.com:MISP/PyMISP. [Hannah Ward]
- Merge pull request #66 from YacineKhamis/master. [Raphaël Vinot]
Treemap.py requirements updated in the README.MD file
- Treemap.py requirements updated in the README.MD file. [Student CIRCL]
- Major rewrite of the schema. [Raphaël Vinot]
- Merge branch 'master' of github.com:CIRCL/PyMISP. [Raphaël Vinot]
- Merge pull request #95 from RichieB2B/ncsc-nl/send-attributes.
[Raphaël Vinot]
Return json when adding attributes
- Return json when adding attributes. [Richard van den Berg]
- Properly display deprecation warning. [Raphaël Vinot]
- Fix python 3 support. [Raphaël Vinot]
Fix #94
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge branch 'master' of github.com:CIRCL/PyMISP. [Alexandre Dulaunoy]
- Cleanup misp2clamav. [Raphaël Vinot]
- Merge branch 'master' of github.com:CIRCL/PyMISP. [Raphaël Vinot]
- Merge pull request #93 from RichieB2B/ncsc-nl/misp2clamav. [Alexandre
Dulaunoy]
Convert MISP file hashes to ClamAV hdb file
- Add misp2clamav. [Richard van den Berg]
- Merge pull request #63 from TheDr1ver/patch-5. [Raphaël Vinot]
publish_timestamp Windows 7 Fix
- Extended the Windows fix to lines 168 and 471. [Nick Driver]
- Publish_timestamp Windows 7 Fix. [Nick Driver]
On Windows 7 datetime.datetime.fromtimestamp(int(0)) returns a date before 1970, which causes the script to crash. This fixes the bug.
- Allow to pass a MISPEvent to add_event and update_event. [Raphaël
Vinot]
- Add an attributes to an event without sending the full existing event.
[Raphaël Vinot]
- Allow to pass None to to_ids, default to sane default. [Raphaël Vinot]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #61 from iglocska/master. [Raphaël Vinot]
Small change to make travis happy
- Small change to make travis happy. [iglocska]
- attribute_count default changed to 0 in misp
- Fix add_domain_ip. [Déborah Servili]
- Merge pull request #60 from TheDr1ver/patch-3. [Alexandre Dulaunoy]
Example using the search() function
- Example using the search() function. [Nick Driver]
Accepts specific parameters from search() instead of just using search_all().
- Update types, allow 0 as attribute value. [Raphaël Vinot]
v2.4.68 (2017-03-09)
--------------------
- Version bump. [Raphaël Vinot]
- Fix tests. [Raphaël Vinot]
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Merge pull request #58 from rmarsollier/master. [Raphaël Vinot]
Using the facilities introduced by MISP commit ...
- Using the facilities introduced by MISP commit
bdbd0920ba760a514cffdb30cc741b61b589d9da (fix: attachTagToObject and
removeTagFromObject now accept posted JSON objects) [rmarsollier]
- Merge pull request #56 from rmarsollier/master. [Raphaël Vinot]
throw exception for invalid uuid
- Throw exception for invalid uuid. [rmarsollier]
- Merge pull request #55 from rmarsollier/master. [Raphaël Vinot]
example using tag() function instead of add_tag()
- Example using tag() function instead of add_tag() [rmarsollier]
- Reorganisation, make add attribute more flexible. [Raphaël Vinot]
- Properly split ip:port for ipv4 (openioc import) [Raphaël Vinot]
- Properly support CDATA fields in OpenIOC files. [Raphaël Vinot]
v2.4.67 (2017-02-27)
--------------------
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Install PyMISP with python3 by default. [Raphaël Vinot]
Because reasons.
- Version bump. [Raphaël Vinot]
- Allow to pass a pseudo file to OpenIOC loader. [Raphaël Vinot]
- Security fix: do not try to load any valid path as a MISP Event.
[Raphaël Vinot]
The MISP Event loader was trying to open any string passed as parameter
if is an existing filepath. Anything that isn't a valid MISP event would
raise an exception, but I can see it used for malicous purposes.
load_file is will do the same, but the user can decide if it is safe to
use.
- Allow filenames with regexes. [Raphaël Vinot]
Fix #52
- Merge pull request #53 from SekoiaLab/feature/serversRestApi. [Raphaël
Vinot]
Adds new methods to add and edit servers in MISP
- Feature: Adds new methods to edit servers in MISP. [Sebastien Quioc]
- Feature: Adds new methods to add new servers in MISP. [Sebastien
Quioc]
- Merge pull request #51 from SekoiaLab/feature/AddAuthkeyAtCreation.
[Raphaël Vinot]
feature: Add support for authkey in PyMISP operations
- Feature: Add support for authkey in PyMISP operations. [Adrien RAFFIN]
- Update tests. [Raphaël Vinot]
Fix #86
- Merge pull request #85 from MISP/errorhandling2. [Alexandre Dulaunoy]
Errorhandling2
- Merge branch 'master' into errorhandling2. [iglocska]
- Merge branch 'master' of github.com:CIRCL/PyMISP. [Raphaël Vinot]
- Merge pull request #84 from RichieB2B/ncsc-nl/fix-distribution.
[Raphaël Vinot]
Allow 'Your organisation only' distribution for attributes
- Allow 'Your organisation only' distribution for attributes. [Richard
van den Berg]
- Potential fix for the errors not being picked up by pymisp from the
response "errors" field. [iglocska]
- Merge branch 'master' into travisfix. [iglocska]
- Add method to set sightings from a string. [Raphaël Vinot]
- Fix travis online. [Raphaël Vinot]
- Update bundled-in describeTypes.json. [Raphaël Vinot]
- Added creator email field to the assertions. [iglocska]
v2.4.65 (2017-02-09)
--------------------
Fix
~~~
- Don't auto-publish events. [Hannah Ward]
Other
~~~~~
- Version dump. [Raphaël Vinot]
- Add support for {attach,remove}TagToObject. [Raphaël Vinot]
Fix #47
- Merge branch 'master' of github.com:MISP/PyMISP. [Raphaël Vinot]
- Add legend. [Déborah Servili]
- Merge branch 'master' of https://github.com/MISP/PyMISP. [Déborah
Servili]
- Merge pull request #49 from cvandeplas/master. [Alexandre Dulaunoy]
YARA dumper for all rules
- YARA dumper for all rules. [Christophe Vandeplas]
This dumper also does YARA rule validation, ignores invalid rules and prevents duplicate rule names. The output is a file called misp.yara which can be used with your favorite YARA tool.
- Merge pull request #50 from cvandeplas/feature_get_all_attributes_txt.
[Alexandre Dulaunoy]
get_all_attributes_txt - support the additional flags
- Get_all_attributes_txt - support the additional flags. [Christophe
Vandeplas]
- Restore file deleted by mistake. [Déborah Servili]
- Add ta_scatter.py script & reorganise tools. [Déborah Servili]
- Fix error message. [Raphaël Vinot]
v2.4.63 (2017-01-31)
--------------------
- Version bump. [Raphaël Vinot]
- Fix regression. [Raphaël Vinot]
Fix #46
v2.4.62.1 (2017-01-27)
----------------------
Changes