You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CHANGELOG.md
+15-17Lines changed: 15 additions & 17 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,13 +6,11 @@
6
6
CHANGELOG
7
7
==========
8
8
9
-
3.1.0 (unreleased)
9
+
3.1.0 (2023-02-10)
10
10
------------------
11
11
12
12
- Upgraded syntax to Python 3.6 (mostly Format-Strings) using pyuprade (PR#2136 by Sebastian Wagner).
13
13
14
-
### Configuration
15
-
16
14
### Core
17
15
-`intelmq.lib.upgrades`:
18
16
- Refactor upgrade functions global configuration handling removing the old-style defaults configuration (PR#2058 by Sebastian Wagner).
@@ -45,14 +43,12 @@ CHANGELOG
45
43
- Removes `tzone` argument from `DateTime.from_timestamp` and `DateTime.from_epoch_millis`
46
44
-`DateTime.from_timstamp` now also allows string argument
47
45
- Removes `pytz` global dependency
48
-
- Removed support for Python 3.6, including removing conditional dependencies and updating syntax to use features from newest versions. (fixes [#2272](https://github.com/certtools/intelmq/issues/2272)
46
+
- Removed support for Python 3.6, including removing conditional dependencies and updating syntax to use features from newest versions. (fixes [#2272](https://github.com/certtools/intelmq/issues/2272))
49
47
50
48
### Development
51
49
- Removed Python 3.6 from CI.
52
50
- Enabled tests against Python 3.11.
53
51
54
-
### Data Format
55
-
56
52
### Bots
57
53
- Set the parent class of all bots to the correct bot class
58
54
@@ -68,16 +64,18 @@ CHANGELOG
68
64
#### Parsers
69
65
-`intelmq.bots.parsers.alienvault.parser_otx`: Save CVE data in `extra.cve` instead of `extra.CVE` due to the field name restriction on lower-case characters (PR#2059 by Sebastian Wagner).
70
66
-`intelmq.bots.parsers.anubisnetworks.parser`: Changed field name format from `extra.communication.http.x_forwarded_for_#1` to `extra.communication.http.x_forwarded_for_1` due to the field name restriction on alphanumeric characters (PR#2059 by Sebastian Wagner).
71
-
-`intelmq.bots.parsers.dataplane.parser`: Add support for additional feeds (PR#2102 by Mikk Margus Möll).
72
-
- DNS Recursion Desired
73
-
- DNS Recursion Desired ANY
74
-
- DNS Version
75
-
- Protocol 41
76
-
- SMTP Greet
77
-
- SMTP Data
78
-
- Telnet Login
79
-
- VNC/RFB Login
80
-
- Removed `intelmq.bots.parsers.malc0de`: this bot was marked as deprecated and removed from feed due to offline status (PR#2184 by Tamas Gutsohn, fixes#2178).
67
+
-`intelmq.bots.parsers.dataplane.parser`:
68
+
- Add support for additional feeds (PR#2102 by Mikk Margus Möll).
69
+
- DNS Recursion Desired
70
+
- DNS Recursion Desired ANY
71
+
- DNS Version
72
+
- Protocol 41
73
+
- SMTP Greet
74
+
- SMTP Data
75
+
- Telnet Login
76
+
- VNC/RFB Login
77
+
- Fix event object creation (PR#2298 by DigitalTrustCenter).
78
+
- Removed `intelmq.bots.parsers.malc0de`: this bot was marked as deprecated and removed from feed due to offline status (PR#2184 by Tamas Gutsohn, fixes #2178).
81
79
-`intelmq.bots.parsers.microsoft.parser_ctip`:
82
80
- New parameter `overwrite` (PR#2112 by Sebastian Wagner, fixes #2022).
83
81
- Fix handling of field `Payload.domain` if it contains the same IP address as `Payload.serverIp` (PR#2144 by Mikk Margus Möll and Sebastian Wagner).
@@ -130,7 +128,7 @@ CHANGELOG
130
128
- Recovering CSV lines preserves the original line ending (PR#2280 by Kamil Mankowski, fixes [#1597](https://github.com/certtools/intelmq/issues/1597))
131
129
-`intelmq.bots.parsers.autoshun.parser`: Removed, as the feed is discontinued (PR#2214 by Sebastian Waldbauer, fixes #2162).
132
130
-`intelmq.bots.parsers.openphish.parser_commercial`: Refactored complete code (PR#2160 by Filip Pokorný).
133
-
- Fixes wrong mapping of `host` field to `source.fqdn` when the content was in IP address.
131
+
- Fixes wrong mapping of `host` field to `source.fqdn` when the content was an IP address.
134
132
- Adds newly added fields in the feed.
135
133
-`intelmq.bots.parsers.phishtank.parser`: Refactored code (PR#2270 by Filip Pokorný)
136
134
- Changes feed URL to JSON format (contains more information). The URL needs to by manually updated in the configuration!
Copy file name to clipboardExpand all lines: NEWS.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
<!-- comment
2
-
SPDX-FileCopyrightText: 2015-2022 Sebastian Wagner
2
+
SPDX-FileCopyrightText: 2015-2023 Sebastian Wagner
3
3
SPDX-License-Identifier: AGPL-3.0-or-later
4
4
-->
5
5
@@ -10,25 +10,25 @@ This file lists all changes which have an affect on the administration of IntelM
10
10
Please refer to the change log for a full list of changes.
11
11
12
12
13
-
3.1.0 Feature release (unreleased)
13
+
3.1.0 Feature release (2023-02-10)
14
14
----------------------------------
15
15
16
16
### Bots
17
-
#### ShadowServer Reports API collector
17
+
#### Shadowserver Reports API collector
18
18
The misleading `country` parameter has been depreciated and a `reports` parameter has been added.
19
19
The backwards-compatibility will be removed in IntelMQ version 4.0.0.
20
20
See the [Shadowserver Reports API bot's documentation](https://intelmq.readthedocs.io/en/latest/user/bots.html#shadowserver-reports-api).
21
21
22
22
#### GitHub Collector
23
-
GitHub removed the basic `Username/Password` Authentication in favor of personal access tokens. So the GitHub Collector uses an Personal Access Token for authentication [Github Documentation: Generate a personal access token](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token)
23
+
GitHub removed the basic `Username/Password` Authentication in favor of personal access tokens. So the GitHub Collector uses an Personal Access Token for authentication [GitHub Documentation: Generate a personal access token](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token)
24
24
25
25
#### url expert bot will deprecate url2fqdn
26
26
There is a new, more abstract bot (URL expert bot) which will gradually replace the old url2fqdn bot. The new one builds on top of the urlparse lib of python.
27
27
If you use the url2fqdn bot, please start migrating.
28
28
29
29
### Feeds
30
30
#### Abuse.ch Feodo Tracker
31
-
IntelMQ previously supported two feeds: "Feodo Tracker IPs" (downloaded as csv file) and "Feodo Tracker Browse" (downloaded as HTML table). These two feeds contain the same data but differ in the additional details. This IntelMQ release replaces both these feeds (and their parsers) with a feed called "Feodo Tracker" (downloaded as json file) which contains all the additional details from both feeds. The parser module for the new feed is `intelmq.bots.parsers.abusech.parser_feodotracker`.
31
+
IntelMQ previously supported two feeds: "Feodo Tracker IPs" (downloaded as CSV file) and "Feodo Tracker Browse" (downloaded as HTML table). These two feeds contain the same data but differ in the additional details. This IntelMQ release replaces both these feeds (and their parsers) with a feed called "Feodo Tracker" (downloaded as JSON file) which contains all the additional details from both feeds. The parser module for the new feed is `intelmq.bots.parsers.abusech.parser_feodotracker`.
32
32
33
33
### Data Format
34
34
#### Field name checks
@@ -37,7 +37,7 @@ The check which ensures this, was ineffective prior to this version and is effec
37
37
The [Data format documentation](https://intelmq.readthedocs.io/en/maintenance/dev/data-format.html#rules-for-keys) describes the required format.
38
38
39
39
### Logrotate
40
-
The packaged configuration for logrotate falsely contained options applying to other programs' log files. This caused wrong ownerships of log files.
40
+
The packaged configuration for *logrotate* falsely contained options applying to other programs' log files. This caused wrong ownership of log files.
41
41
This issues is corrected, but the ownership of affected log files may need to be changed manually.
42
42
To find affected files, you may use:
43
43
```bash
@@ -50,7 +50,7 @@ The parameter `timeout` has been merged into `redis_cache_ttl`.
50
50
51
51
### Postgres databases
52
52
53
-
The develop branch previously contained a set of unnecessary statements to update the classification.identifier. If these changes were made please revert back to the previous state.
53
+
The develop branch previously contained a set of unnecessary statements in a pre-release version to update the `classification.identifier`. If these changes were made please revert back to the previous state.
0 commit comments