Skip to content

Latest commit

 

History

History
167 lines (133 loc) · 11.1 KB

CHANGELOG.md

File metadata and controls

167 lines (133 loc) · 11.1 KB
Raw

CHANGELOG

We have started this changelogs from version 4.0.0. So, changes on previously released versions can be found in tag branches. Please follow the below format to update add changelogs for new tag version.

<Tag_Version> (Date)

Breaking changes:

List the breaking changes in this section. Breaking changes is anything that either changes the input or output of stix-shifter, or a change that breaks the compatibility between a connector and the core stix-shifter functions.

Deprecations:

List the Deprecated functions, input and output.

Changes:

List the newly added functions, input and output.

Fixes:

List the bug fixes.

Dependency update:

List the dependecy upgrade or downgrade.

4.2.0 (2022-06-29)

Breaking changes:

Deprecations:

Changes:

  • Added reaqta from_stix generate script #977
  • Change certificate parameter type #1000
  • splunk: add index to options #993
  • Best practices document for connector development #986
  • Update supported attributes and overview readme #976
  • Guardium rel 1.10 #958
  • Updated the readme mappings for darktrace. #942
  • Added Darktrace UDI connector. #896
  • Update table of mappings for ReaQta and IN operator support #937
  • Updated the Readme mapping files #932
  • Adding SentinelOne UDI connector #888
  • Reaqta connector #879

Fixes:

  • Fixed unique_cybox_objects storing #1005
  • fallback to random UUID if STIX object contains no defined id contributing properties #990
  • error_test timeouts on translate and status #987
  • fix two deprecation warnings #940
  • splunk: fix mapping of process command line [#918] #971
  • splunk: fix incorrect dst_ref.value mapping [#919] #970
  • splunk: fix translation of IN, LIKE, and MATCHES [#789] #969
  • fix eventType mapping for reaqta connector #967
  • Reaqta: Fix network traffic for inbound and mapping update #952
  • Remove deprecated SourceImage field from aql search #950
  • Reaqta: implemented grater/less fields translation, fixed from_stix fields sorting, fixed unittests #938
  • Reaqta Connector:Update mapping and unittest #964
  • Fixed stix parsing with setvalue types #907

Dependency update:

  • Bump boto3 from 1.21.5 to 1.22.10 #935
  • Bump xmltodict from 0.12.0 to 0.13.0 #934
  • Bump stix2-matcher from 2.0.1 to 2.0.2 #915

4.1.0 (2022-04-12)

Breaking changes:

Deprecations:

Changes:

  • Updated mappings for PaloAlto readme #890
  • Added Palo Alto Cortext XDR UDI Connector #858
  • package utils/normalization #882
  • add sample transformer to template modules #870
  • Added IN operator for Vision One UDI connector #861
  • Update arcsight custom attributes #865
  • results metadata support #813
  • Template projects rename #854
  • doc update for operators and custom transformers #846
  • Adding BaseNormalization Class #820
  • Add IN operator for sumologic connector #845
  • Adding IN operator support to CB connector #835
  • Stix validator update #838
  • CrowdStrike: Adding IN operator support #842
  • Adding changelog #833
  • New UDI connector module for IBM Security Verify #802
  • Adding connector name in the error responses #824

Fixes:

  • use simple setup for mysql endpoints #885
  • Mysql tablename fix #868
  • RestApiClient in stix-shifter using https mount call #864
  • Fixed StixObjectId conversion to string #863
  • Fixed stix-validator 3.0.2 usage in translator #851
  • remove process_user field mapping from windows-registry-key stix object #850
  • Secret server 1.9 #836
  • Fixed calculating and updating deterministic IDs and the… #826

4.0.1 (2022-03-01)

Breaking changes:

Deprecations:

Changes:

  • CrowdStrike connector mapping update #823

Fixes:

Dependency update:

  • Downgrade pyopenssl from 22.0.0 to 21.0.0

4.0.0 (2022-02-23)

Breaking changes:

  • Handling unmapped operators in stix pattern
  • Optimization of results translation

Deprecations:

Changes:

  • Added New connector: Cybereason
  • Added Stix 2.1 ids and mapping update in #731 #721
  • Added stix-shifter CLI parameters to configure max returned results and saving to a file in #730
  • Azure Sentinel Mapping update in 710
  • Handling unmapped operators in stix pattern in #744
  • Placeholder for datadog certificate in #782
  • Proofpoint: Update labels in configuration in 792
  • Added Operator list in adapter guide in #804
  • Splunk mapping update in #797
  • Keep both helper description and the link description in 818
  • Optimization of results translation in #718
  • QRadar mapping update in #751

Fixes

  • Datadog ssl cert fix.#758
  • cbcloud: fix ipv4 stix pattern translation #761
  • fix configuration in proofpoint and sumologic #745
  • Crowdstrike unittest fix #775
  • Fix error reponse of ms defender connector #747
  • fix: handling zero and non-zero values for the transformers #774
  • Fix Proofpoint: avoid mapping error for standard STIX Pattern translation #786
  • Proofpoint results connection fix #739
  • Fix local build and install #779
  • fix collections.abc warning #793
  • fix instances of reserved STIX 2.1 id property #819
  • Fix category in ecs to be list type #734
  • fix debug cli param #735
  • fix azure sentinel: Incorrect string conversion of datasource values #771

Dependency update

  • Bump stix2-patterns from 1.3.0 to 1.3.2
  • Bump flatten-json from 0.1.7 to 0.1.13
  • Bump flask from 1.1.2 to 2.0.3
  • Bump python-dateutil from 2.8.1 to 2.8.2
  • Bump jsonmerge from 1.7.0 to 1.8.0
  • Bump colorlog from 4.1.0 to 6.6.0
  • Bump adal from 1.2.2 to 1.2.7
  • Bump pyopenssl from 20.0.1 to 22.0.0
  • Bump stix2-validator from 1.1.2 to 3.0.2
  • Bump boto3 from 1.17.20 to 1.21.5## 4.0.0 (2022-02-23)