Version 7.261109.0

Bug Fixes:

• #8320 fix(ransomlook): test_collect_builds_expected_graph calls the live RansomLook API
• #8202 fix(stairwell): enrichment creates observables for non-routable IPs and file names
• #8201 fix(cybersixgill): AttributeError on mid-loop state update in darkfeed importer
• #8169 fix(montysecurity-c2-tracker): source data removed upstream, connector imports nothing while reporting success
• #8159 fix(flashpoint): malware description "N/A" overwrites the description of existing malware
• #7955 fix(polyswarm-sandbox): TLP check raises on every marked artifact

Community Contributions Highlight:

• fix(stairwell): only relate routable IPs and real host names (#8202) by zachdaniel-SW in #8203
• fix(polyswarm-sandbox): pass a TLP name to check_max_tlp (#7955) by Erick Ingleby (@erickingleby-polyswarm) in #8243

---

Pull Requests:

• feat(urlhaus): cache threat lookups that return no entity (#8156) by Romain GUIGNARD (@romain-filigran) in #8157
• fix(montysecurity-c2-tracker): fail the run when the source cannot be read (#8169) by Samuel Hassine (@SamuelHassine) in #8245
• fix(flashpoint): drop the "N/A" malware description placeholder (#8159) by Samuel Hassine (@SamuelHassine) in #8175
• fix(cybersixgill): parse the modified timestamp at the mid-loop checkpoint (#8201) by Yumin Kim (@yuminn-k) in #8288
• fix(polyswarm-sandbox): pass a TLP name to check_max_tlp (#7955) by Erick Ingleby (@erickingleby-polyswarm) in #8243
• fix(stairwell): only relate routable IPs and real host names (#8202) by zachdaniel-SW in #8203
• fix(ransomlook): mock the claim detail call in the collect graph test (#8320) by Thibaut Rouxel (@throuxel) in #8321

New Contributors:

• Yumin Kim (@yuminn-k) made their first contribution in #8288

Full Changelog: 7.261106.0...7.261109.0