Skip to content

v1.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Nov 08:21
· 14 commits to main since this release
v1.1.0
bad69e1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changed: capability output rules name CTIS 2.0 members

The output rules no longer require opaque properties keys (CTIS 2.0 gives properties no meaning) or removed 1.x members:

  • discover.subdomains: value (the root domain is derived by the receiver).
  • monitor.web_content: extensions (the captures are extensions["io.openctem"].web_content).
  • intel.passive: source_refs instead of properties.source.
  • lookup.asn ranges: technical.ip_address.asn.
  • discover.hosts: last_seen_at instead of properties.live_by.
  • scan.ports shape open_port_assets: technical.service.port and technical.service.transport (the host is in the service value host:port/transport).
  • service detection: technical.service.app_protocol or technical.service.product.
  • probe.http: technical.http.status_code; technology detection: technologies; capture.screenshot (planned): value.
  • Findings: asset_value and vulnerability.cve_id removed from the rules (asset_ref is required in 2.0; vulnerability.ids); evidence is evidence_items.
Assets 2
Loading