What's Changed

• Fixed some issues about TAXII client by @stmtstk in #164
• Bump version to 2.0.2 by @stmtstk in #165

Full Changelog: v2.0.1...v2.0.2

This release includes the following changes.

• Added

  • Pull Request #163 [MINOR] Support CSRF_TRUSTED_ORIGINS

• Fixed

  • Pull Request #162 [PATCH] Bump version to 2.0.1
  • Pull Request #161 [PATCH] Modified the version on the header

This release includes the following changes.

• Added

  • Pull Request #132 [MINOR] Get STIX 2 file from a MISP instance
  • Issue #155 [MINOR] Certificate authentication over TAXII 2.0/2.1 client
  • Pull Request #158 [MINOR] Add a secure flag on csrf
  • Pull Request #159 [MAJOR] Support modeling STIX Custom objects structure
  • Pull Request #160 [MAJOR] Support for the plugfest (STIX 2.1, TAXII 2.1)

• Fixed

  • Issue #134 [PATCH] Cannot parse a STIX 1.x file which contains TTPs block
  • Issue #136 [PATCH] Remove unnecessary files about jquery-ui
  • Issue #138 [PATCH] TAXII 2.x client shows success even if poll fails
  • Issue #140 [PATCH] It fails to parse STIX 1.x that contains BOM
  • Issue #142 [PATCH] For the latest Django library
  • Issue #144 [PATCH] Cannot boot S-TIP when using the latest stix2-elevator
  • Issue #146 [PATCH] STIX representing attachments is not deleted
  • Issue #147 [PATCH] An internal server error occurs when a user attach a big size file
  • Issue #149 [PATCH] An installation error occurs
  • Issue #151 [PATCH] Json parse error occurs
  • Issue #154 [PATCH] Duplication Error during TAXII 1.1 poll
  • Pull Request #157 [PATCH] Rename custom property names

This release includes the following changes.

• Added

  • Issue #113 [MAJOR] Add some REST API functions
  • Issue #120 [MAJOR] Apply APIKey authentication to API for sns
  • Pull Request #125 [MAJOR] Return a STIX version via GraphVIew API
  • Issue #128 [MAJOR] Enable to specify the TAXII 1.1 Poll STIX files via Community

• Fixed

  • Issue #115 [PATCH] Cannot remove STIX 2.1 objects via REST API
  • Issue #117 [PATCH] An error occurs in SNS when a STIX 2.1 file without an objects property is uploaded
  • Pull Request #122 [PATCH] Replace example values
  • Issue #123 [PATCH] Cannot clear an Indicator cache
  • Issue #126 [PATCH] Invalid fixture data
  • Issue #130 [PATCH] An invalid error occurs with an certain case

This release includes the following changes.

• Added

  • [MAJOR] Hashtag support - Stores and loads hashtag data

• Changed

  • N/A

• Fixed

  • Issue #108 [PATCH] 404 error in bootstrap.css.map
  • Issue #110 [PATCH] Cannot connect to MISP instance.
  • Pull Request #112 [PATCH] Fixed an issue about SSO

This release includes the following changes.

• Added

  • [MAJOR] Supported MFA (Multi-Factor Authentication) based on TOTP (Time-based One Time Password) for SSO (Single Sign-On).
  • [MINOR] Added association between the AIS S-TIP account and the STIX files in the new AIS STIX format.
  • [MINOR] Added calendar popovers for date/time input fields.

• Changed

  • N/A

• Fixed

  • Issue #49 [PATCH] Fixed the issue that the TAXII client password and certification file settings are cleared unexpectedly.
  • Issue #84 [PATCH] Fixed the issue that no STIX files are returned after a successful poll from AlienVault OTX.
  • Issue #88 [PATCH] Fixed django_settings to refer the SECRET_KEY value from .env file.
  • Issue #89 [PATCH] Fixed django_settings to set its default timezone from .env file.

This release includes the following changes.

• Bug fixes
  • Modify a version file
  • Fixed an issue about a TAXII 1.1 client function

This release includes the following changes.

• Features

  • STIX 2.1 support
  • S-TIP version file improvement

• Bug fixes

  • Modify to adapt the latest taxii2client when S-TIP connects to ATT&CK.
  • Fix an issue about a nested Slack WebClient EventLoop.
  • Fix an issue about file hash patternings.
  • Fix an issue about generating a CSV content.
  • Fix an issue about collaborating with Phantom, Splunk, Jira.

This release includes the following changes.

• Features
  • User management improvement
    • Admin can reset a user's password in "Configuration" -> "User" view
    • Admin can change a user's role in "Configuration" -> "User" view
  • Automatic reload recent CTI in "List" view
  • Search result view improvement
• Bug fixes
  • Error when uploading and downloading a file with multi-byte filename
  • Encoding error with connecting to Slack
  • Error in iSIGHTPartners adapter
  • Error in automated interval poll
  • Authentication error when using a certificate

This release includes the following changes.

• Migration to Python 3.6+
• Add functions for REST API
• Update the favicon
• Add ATT&CK mongo settings into sns_config.json
• Add new feature of creating a sighting object
• Bugfix: can not connect to MISP via proxy