Version 3.3.0

What's Changed

• Modernize model fields: GenericIPAddressField and db_default=Now() by @SupRaKoshti in #887
• Add IP enrichment via ThreatFox and AbuseIPDB. Progresses #522 by @opbot-xd in #867
• Skip IOCs with empty days_seen in scoring pipeline by @Sanchit2662 in #892
• Feeds page: add IntelOwl analysis link for each IOC. Closes #292 by @rootp1 in #865
• Several Docker-related improvements by @regulartim in #890
• Fix Docker regressions from PR #890. Closes #898 by @regulartim in #900
• Replace regex IP validation with ipaddress stdlib in EnrichmentSerializer. Closes #881 by @tanmayjoddar in #885
• feat(pipeline): GeoIP enrichment . Closes #524 by @drona-gyawali in #880
• Fix: clear user data and isSuperuser on logout by @Deepanshu1230 in #897
• Feeds filters controlled by Formik state. Closes #889 by @UsamaElareeny in #894
• Login attempts from various honeypots included. Fixes #470 by @rootp1 in #911
• feat(api): Geo related field addition in the feed_response. Closes #524 by @drona-gyawali in #909
• Disable submit buttons while submitting to avoid duplicate api request. Closes #903 by @UsamaElareeny in #915
• Fix DatabaseDefault crash in _update_days_seen. Closes #908 by @Sanchit2662 in #910
• Filter feed type. Closes #421 by @armoredvortex in #907
• build(deps): bump django from 5.2.11 to 5.2.12 in /requirements by @dependabot[bot] in #940
• Propagate firehol_categories in _merge_iocs. Closes #922 by @tanmayjoddar in #933
• build(deps): bump axios from 1.13.5 to 1.13.6 in /frontend by @dependabot[bot] in #937
• build(deps-dev): bump stylelint from 17.3.0 to 17.4.0 in /frontend by @dependabot[bot] in #939
• fix: remove redundant loading state in EnrichmentLookup. by @Deepanshu1230 in #942
• expose tags in API responses and add tag-based filtering. Closes #522 by @opbot-xd in #899
• Add rate limiting to feeds endpoints. by @manik3160 in #927
• Chore: Add missing rel attributes to target="_blank" links. Closes #912 by @ZGr3Y in #920
• Add button to reset filters on Feeds page. Closes #935 by @armoredvortex in #943
• fix: use correct query param key for format in feeds_advanced by @Sanchit2662 in #953
• fix(security): Secure ALLOWED_HOSTS configuration. Closes #925 by @chauhan-varun in #950
• feat(feeds): display country info in details popover. Closes #549 by @lvb05 in #954
• fix : remove redundant nested Suspense wrappers in Routes.jsx by @Deepanshu1230 in #966
• fix: return empty list instead of empty dict in load_training_data by @Sanchit2662 in #971
• refactor: remove localStorage persistence from Register form by @minthanttun20 in #958
• Advanced filtering, STIX 2.1 export, and shareable feed URLs by @R1sh0bh-1 in #839
• Implementation of the Tanner Honeypot Extraction and Including it in Pipeline. Closes #919 by @rootp1 in #944
• Fix: changepassword validation. Closes #951 by @UsamaElareeny in #963
• test: add test coverage for tasks.py wrapper functions. Closes #964 by @opbot-xd in #973
• fix(extraction): use min/max semantics for first_seen and last_seen in _merge_iocs. Closes #967 by @tanmayjoddar in #974
• fix: union instead of replace for include_similar in command_sequence… by @Sanchit2662 in #992
• Strip timezone from parsed ES timestamps to prevent naive/aware comparison. Closes #1003 by @regulartim in #1004
• Add GitHub and LinkedIn links to footer. Closes #979 by @Aditya30ag in #1002
• Add slack tests by @Abhijeet17o in #1000
• feature: normalize credentials into separate Credential model. Closes #668 by @rahulgunwanistudy-2005 in #902
• Remove country code from AbuseIPDB enrichment / Tags by @regulartim in #1001
• rDNS-based noise filtering for known scanners. Closes #527 by @Sahityaaryan in #934
• Frontend: Improve Error Boundary Coverage. Closes #978 by @chauhan-varun in #982
• test: add tests for AuthGuard and IfAuthRedirectGuard by @Deepanshu1230 in #988
• build(deps): bump stix2 from 3.0.1 to 3.0.2 in /requirements by @dependabot[bot] in #1015
• build(deps): bump numpy from 2.4.2 to 2.4.3 in /requirements by @dependabot[bot] in #1016
• Attack Origin Visualizer for Dashboard. Closes #955 by @armoredvortex in #983
• fix(extraction): add sort guard to _update_days_seen to prevent corrupted days_seen ordering. Closes #1007 by @tanmayjoddar in #1010
• Fix unauthenticated feeds memory exhaustion DoS. Closes #844 by @R1sh0bh-1 in #993
• test: add coverage for ClusterCommandSequences.run(). Closes #976 by @tanmayjoddar in #1005
• fix: record statistics only after input validation in cowrie_session_… by @Sanchit2662 in #1021
• Refactor: Reduce duplicated logic in chart components. Closes #969 by @swara-2006 in #990
• feat: allow querying CowrieSession API by password. Closes #607 by @rahulgunwanistudy-2005 in #1022
• feat(pipeline/api): replace IOC.asn with AutonomousSystem FK. Closes #770 by @drona-gyawali in #947
• perf: bulk-prefetch extraction data. Closes #1008 by @manik3160 in #1020
• fix: eliminate N+1 queries in IocRepository.add_honeypot_to_ioc(). Closes #1012 by @Abhijeet17o in #1024
• Migrate from uWSGI to gunicorn. Closes #891 by @SupRaKoshti in #904
• refactor: define IpReputation constants and replace hardcoded strings. Closes #1026 by @Sahityaaryan in #1030
• Add client-side validation to enrichment lookup. Closes #1023 by @chauhan-varun in #1031
• fix: normalize_credential_field missing truncation. by @Sanchit2662 in #1033
• tests: add test coverage for utilities in greedybear/utils.py. Closes #1043 by @manik3160 in #1047
• fix: replace socket.inet_aton with ipaddress.ip_address to support IPv6 sources. by @rahulgunwanistudy-2005 in #1064
• Fix: case-insensitive honeypot membership check in add_honeypot_to_ioc() by @Abhijeet17o in #1068
• build(deps): bump library/nginx from 1.29.5-alpine to 1.29.6-alpine in /docker by @dependabot[bot] in #1075
• build(deps): bump slack-sdk from 3.40.1 to 3.41.0 in /requirements by @dependabot[bot] in #1076
• feat: persist Feeds page filters in URL query params by @Deepanshu1230 in #1035
• build(deps): bump croniter from 6.0.0 to 6.2.2 in /requirements by @dependabot[bot] in #1077
• enh: Log feature importances after Random Forest training . Closes #1050 by @drona-gyawali in #1065
• Feature: Extract and store Cowrie file transfer metadata. Closes #848 by @cclts in #1041
• Feature: Implementation of Heralding extraction strategy. Closes #1006 by @rootp1 in #1042
• build(deps): bump sass from 1.97.3 to 1.98.0 in /frontend by @dependabot[bot] in #1078
• build(deps-dev): bump @vitest/coverage-v8 from 4.0.18 to 4.1.0 in /frontend by @dependabot[bot] in #1079
• build(deps-dev): bump jsdom from 28.1.0 to 29.0.0 in /frontend by @dependabot[bot] in #1080
• build(deps-dev): bump @vitejs/plugin-react from 5.1.4 to 5.2.0 in /frontend by @dependabot[bot] in #1081
• build(deps-dev): bump vite from 7.3.1 to 8.0.0 in /frontend by @dependabot[bot] in #1082
• Added test for useAuthStore component:Closes #987 by @swara-2006 in #1037
• fix(cronjob): propagate exceptions in execute() to prevent downstream errors. Closes #1034 by @IQRAZAM in #1048
• Fix ordering regression. Closes #1093 by @armoredvortex in #1094
• Fixed command_sequence by @ChaitanyaChute in #1105
• build(deps-dev): bump @vitest/coverage-v8 from 4.1.0 to 4.1.1 in /frontend by @dependabot[bot] in #1116
• build(deps-dev): bump vite from 8.0.1 to 8.0.2 in /frontend by @dependabot[bot] in #1114
• build(deps): bump djangorestframework from 3.16.1 to 3.17.1 in /requirements by @dependabot[bot] in #1112
• build(deps-dev): bump stylelint from 17.4.0 to 17.5.0 in /frontend by @dependabot[bot] in #1113
• build(deps-dev): bump @vitejs/plugin-react from 5.2.0 to 6.0.1 in /frontend by @dependabot[bot] in #1115
• Non-root user using gosu in app container. closes #1102 by @SupRaKoshti in #1106
• tests: add behavioral coverage for dashboard/utils/charts.jsx by @piyushzgautam99-ship-it in #1109
• perf: optimize N+1 queries and bulk database operations in extraction pipeline. Closes #1073 by @manik3160 in #1118
• Support for custom labels/descriptions in the Sensor model.Closes #1060 by @R1sh0bh-1 in #1086
• Fix blank page caused by upgrade to vite 8. Closes #1126 by @regulartim in #1127
• Fix Zombie Sessions by handling 401/403. Closes #1072 by @chauhan-varun in #1123
• Migration to uv. Closes #1131 by @regulartim in #1027
• fix: remove dead code and public sensor exposure from feeds table. Closes #1128 by @R1sh0bh-1 in #1133
• Fix/cowrie session str nonetype by @ayushagarwalhere in #1141
• Refactor: move reputation update loggin into IocRepository. Closes #1107 by @Sahityaaryan in #1142
• Redundant API fetching fix. Closes #1135 by @chauhan-varun in #1144
• fix(cronjobs): update missing autonomous system names from enrichment. Closes #1130 by @manik3160 in #1132
• fix: stabilize and optimize flaky Register tests. Closes #1148 by @manik3160 in #1151
• build(deps): bump library/nginx from 1.29.6-alpine to 1.29.7-alpine in /docker by @dependabot[bot] in #1153
• build(deps-dev): bump @vitest/coverage-v8 from 4.1.1 to 4.1.2 in /frontend by @dependabot[bot] in #1154
• build(deps-dev): bump vite from 8.0.2 to 8.0.3 in /frontend by @dependabot[bot] in #1155
• build(deps-dev): bump stylelint from 17.5.0 to 17.6.0 in /frontend by @dependabot[bot] in #1156
• build(deps): bump axios from 1.13.6 to 1.14.0 in /frontend by @dependabot[bot] in #1157
• test: add LSH clustering coverage for #975 by @Demiserular in #1150
• Enhance session revoke UX. Closes #1125 by @armoredvortex in #1137
• Enh: Add sources tracking to Credential and link IPs on credential creation. Closes #1098 by @drona-gyawali in #1124
• 3.3.0 by @regulartim in #1025

New Contributors

• @Sanchit2662 made their first contribution in #892
• @tanmayjoddar made their first contribution in #885
• @Deepanshu1230 made their first contribution in #897
• @UsamaElareeny made their first contribution in #894
• @manik3160 made their first contribution in #927
• @ZGr3Y made their first contribution in #920
• @chauhan-varun made their first contribution in #950
• @lvb05 made their first contribution in #954
• @minthanttun20 made their first contribution in #958
• @Aditya30ag made their first contribution in #1002
• @Abhijeet17o made their first contribution in #1000
• @rahulgunwanistudy-2005 made their first contribution in #902
• @Sahityaaryan made their first contribution in #934
• @swara-2006 made their first contribution in #990
• @cclts made their first contribution in #1041
• @IQRAZAM made their first contribution in #1048
• @ChaitanyaChute made their first contribution in #1105
• @piyushzgautam99-ship-it made their first contribution in #1109
• @ayushagarwalhere made their first contribution in #1141
• @Demiserular made their first contribution in #1150

Full Changelog: 3.2.0...3.3.0