Merge pull request #48 from MislavReversingLabs/main

2.6.0

Author: MislavReversingLabs

CHANGELOG.md

@@ -278,4 +278,30 @@ v2.5.1 (2024-04-02)
 
 #### Improvements
 - **a1000** module:
-  - Reintroduced the `a1000.A1000.advanced_search_v2` method. This method will remain in the DEPRECATED state until its permanent removal from the SDK. The permanent removal date will be announced in the CHANGELOG's "Scheduled removals" section. In the meantime, the use of `a1000.A1000.advanced_search_v3` is highly advised.
+  - Reintroduced the `a1000.A1000.advanced_search_v2` method. This method will remain in the DEPRECATED state until its permanent removal from the SDK. The permanent removal date will be announced in the CHANGELOG's "Scheduled removals" section. In the meantime, the use of `a1000.A1000.advanced_search_v3` is highly advised.
+
+
+2.6.0 (2024-06-28)
+-------------------
+
+#### Improvements
+- **ticloud** module:
+  - Added the following text to the docstrings for the `ticloud.URLThreatIntelligence.get_url_analysis_feed_from_date` and `ticloud.URLThreatIntelligence.get_url_analysis_feed_from_date_aggregated` methods: "It is possible to list analyses up to 90 days into the past."
+  - Added the `get_objects_aggregated` method to the `TAXIIRansomwareFeed` class.
+  - The `ticloud.DynamicAnalysis.detonate_sample` method now has a `sample_hash` parameter that accepts SHA-1, SHA-256 and MD5 hashes. See the Deprecations section for more info.
+  - The `ticloud.DynamicAnalysis.detonate_sample` method now has a `sample_name` parameter that enable the user to define a custom sample name.
+  - Added the option to fetch all results in auto paging (aggregating) methods. From now on, in such methods, setting the `max_results` parameter to None returns all results.
+
+- **a1000** module:
+  - The `get_yara_ruleset_matches_v2` method now also accepts a list u of multiple ruleset names as the `ruleset_name` parameter.
+  - Added the `upload_sample_and_get_detailed_report_v2` method.
+  - Added the option to fetch all results in auto paging (aggregating) methods. From now on, in such methods, setting the `max_results` parameter to None returns all results.
+
+#### Deprecations
+- **ticloud** module:
+  - The `sample_sha1` parameter of the `ticloud.DynamicAnalysis.detonate_sample` method is deprecated and will be removed in 6 months. Use the `sample_hash` parameter instead.
+
+
+### Scheduled removals
+- **December 2024.**:
+  - In the `ticloud.DynamicAnalysis.detonate_sample` method the `sample_sha1` parameter will be removed.

README.md

@@ -75,6 +75,13 @@ If username and password are used instead, a token fetching request will be done
   - Accepts a single hash or a list of hashes and returns a detailed analysis report for the selected samples
   - This method utilizes the set number of retries and wait time in seconds and times out if the
         analysis results are not ready
+- `upload_sample_and_get_detailed_report_v2`
+  - Accepts either a file path string or an open file in 'rb' mode for file upload and returns a detailed
+        analysis report response.
+  - This method combines uploading a sample and obtaining the detailed analysis report.
+  - Additional fields can be provided.
+  - The result fetching action of this method utilizes the set number of retries and wait time in seconds to time
+        out if the analysis results are not ready.
 - `get_classification_v3`
   - Get classification for one sample
 - `reanalyze_samples_v2`
@@ -363,9 +370,11 @@ _TCA-0403_
     - Returns a list of results aggregated through multiple paginated requests
 - `get_url_analysis_feed_from_date`
     - Accepts time format and a start time and returns URL analysis reports from that defined time onward
+    - It is possible to list analyses up to 90 days into the past
     - Returns only one defined page of results using one request
 - `get_url_analysis_feed_from_date_aggregated`
     - Accepts time format and a start time and returns URL analysis reports from that defined time onward
+    - It is possible to list analyses up to 90 days into the past
     - Returns a list of results aggregated through multiple paginated requests
 
 #### Class:
@@ -866,6 +875,9 @@ class TAXIIRansomwareFeed(TiCloudAPI)
 - `get_objects`
     - Returns objects from a TAXII collection. 
     - Results can be filtered using several parameters.
+- `get_objects_aggregated`
+    - Returns objects from a TAXII collection. 
+    - This method does the paging automatically and returns a defined number of objects as a list in the end.
 
 
 ***

ReversingLabs/SDK/__init__.py

@@ -5,4 +5,4 @@
 A Python SDK for communicating with ReversingLabs services.
 """
 
-__version__ = "2.5.6"
+__version__ = "2.6.0"