misp-workbench - [beta-1.4] Tech-Lab: Reactor Scripts and Analyst Notebooks

We're excited to announce the release of MISP Workbench beta-1.4, introducing two major additions automation features via the new the Tech Lab menu: Reactor Scripts and Analyst Notebooks.

---

⚡ Reactor Scripts

Reactor Scripts bring automation and extensibility directly into MISP Workbench. Write and run custom scripts that interact with your MISP data, enabling you to automate repetitive tasks, enrich events, or trigger custom workflows — all from within the platform.

This release also ships with a test sandbox with integrated flame graph profiling, so you can measure and optimize your scripts' performance before deploying them in production.

---

📓 Analyst Notebooks

Analyst Notebooks provide a flexible, interactive workspace for threat analysts. Combine notes, queries, and structured analysis in a single place, making it easier to document investigations, share findings with your team, and build reproducible analytical workflows on top of your MISP data.

---

🔍 Explore View Improvements

The Explore view now supports correlations search, and hunts can be directly linked to explorations — making it faster to pivot from a hunt result into a broader correlation analysis.

---

🔧 Other Changes & Fixes

• Dependency updates across the frontend and API (axios, postcss, urllib3, authlib, and more)

---

Full changelog: [beta-1.3 → beta-1.4](beta-1.3...beta-1.4)

Docs

• Tech-Lab: Reactor Scripts: https://misp-workbench.readthedocs.io/en/latest/features/tech-lab/reactor/
• Tech-Lab: Analyst Notebooks: https://misp-workbench.readthedocs.io/en/latest/features/tech-lab/notebooks/

What's Changed

• add: support correlations search in explore view, link hunts to explo… by @righel in #306
• chg: change to 30s by @righel in #307
• add Tech Lab — Reactor Scripts by @righel in #311
• add: profile reactor scripts in test sandbox, add flamegraph by @righel in #314
• build(deps-dev): bump axios from 1.15.0 to 1.16.0 in /frontend by @dependabot[bot] in #313
• build(deps): bump postcss from 8.5.6 to 8.5.14 in /frontend by @dependabot[bot] in #315
• fix: reactor scripts screenshots url by @righel in #319
• build(deps): bump mako from 1.3.11 to 1.3.12 in /api by @dependabot[bot] in #317
• build(deps): bump python-multipart from 0.0.26 to 0.0.27 in /api by @dependabot[bot] in #316
• build(deps): bump urllib3 from 2.6.3 to 2.7.0 in /api by @dependabot[bot] in #321
• tech-lab: analyst notebooks by @righel in #320
• build(deps): bump authlib from 1.6.11 to 1.6.12 in /api by @dependabot[bot] in #322

Full Changelog: beta-1.3...beta-1.4