June 2022

New

• Added ExoneraTor provider. Looking IPv4 addresses to see whether they have been a recent Tor relay.
• Microsoft 365 ATP SafeLinks are now decoded in line. Lookups are performed on the SafeLink target.
• Error handling has been overhauled. Errors in lookups are now handled by provider lamdbas and details passed into alert tickets.

Fixed

• Alienvault timeouts and retries tweaked to handle intermittent delays with this service.
• Documentation updates.
• Fixes to the default CloudFormation template.yaml. Errors preventing deployment with a default template were fixed.

More Detail on What's Changed

• Lower OTX timeout by @gyrospectre in #14
• Extend Result Object by @gyrospectre in #16
• Major changes to the way errors in the enrichment lambdas are handled! by @gyrospectre in #17
• Feature/safelinks by @gyrospectre in #18
• New Provider - ExoneraTor by @gyrospectre in #19
• Doc Fixes by @gyrospectre in #20

Full Changelog: v0.1.0-alpha...v0.2.0-alpha

Initial Alpha Release

After a couple of months of testing in the real world, this version is considered usable. It's still early days, so is considered alpha.