MAR Hash lookup allows MD5, SHA1 and SHA256 searches - hunt file
TIE DXL libraries in package included for external reputation option - set reputation
MAR File Hunt output includes more data including filename and path - hunt file
Updated on poll action to new Phantom API's - on poll
TIE Set Reputation allows to set External or Enterprise reputation - set reputation
Subscribe to ATD analysis report and TIE rep changes - all parsers are included - on poll
Improved Error Handling - General
changed the way how the DXL subscriber is generated (code simplification)
DXL subscriber will automatically killed when asset got deleted (after max. 60s)
changed naming convention during asset creation (e.g. both ePO or DXL Broker IP - both supported)
changed set reputation action - able now to set reputations based on MD5, SHA1 or SHA256
changed test message required field to optional
now also released standalone version that includes all dependencies
OpenDXL libraries updated.
New subscription process.
Data ingest got extracted from the main module and is in the DXL subscriber now.
This provides the capability to ingest data to Phantom directly without any waiting time.