Version 5.2.0
Dear community, we are very happy to announce that OpenCTI 5.2.0 has been released π₯³! This new version is mostly linked to the full upgrade of all platform underlying dependencies π€―. As OpenCTI is a growing ecosystem, it is so important we can deliver our roadmap while keeping our key commitment to provide a modern platform using latest technologies and seamless user experience π.
By introducing a new build system, some TypeScript
and all up-to-date libraries, we've also prepared ourselves to deliver more quickly all the features expected for the coming year π, especially around STIX Schema extension, custom ontologies, case management and more connectors π. Also, a huge work around a new correlation engine will begin in a few months!
This version includes full refresh of both dark and light themes (fully customizable), as well as new charts over the entire platform π. Some important bugs have been fixed on single sign on features and a few management screens βοΈ. Also, fuzzy hashing will not lead to hash collision anymore. Some connectors such as MISP, RiskIQ and Shodan have been updated to fix some minor bugs when creating relationships or indicators π.
For the moment, the HTML enriched-text editor has been removed. It will be re-introduced in the next releases.
Enhancements:
- #1931 Create additional permission to manage who can dynamically create new Report types, Malware parameters, TA parameters, etc
- #1925 OpenCTI dark mode and label color
- #1924 Be abble to click on the Knowledges timelines
- #1916 Add option wantAssertionsSigned in the SAML configuration
- #1913 Creation of a campaign with an accurate first_seen timestamp
- #1911 OpenID Configuration not applying
- #1900 Creation of an attack pattern without description
- #1895 Introduce typescript in graphQL API
- #1891 Upgrade graphql API dependencies to latest graphql implementation
- #1886 Change report types management to be only based on database values
- #1883 Add configuration option for certificate passphrase
- #1882 Elasticsearch SSL CA configuration meaning changed in 5.1.2, but didn't get documented
- #1874 Update of field
description
in aresolves-to
relationship is not possible - #1594 Bump Material UI
- #1260 Misunderstanding in targeted countries (3 last months)
Bug Fixes:
- #1923 widget area/vertical bar x-axis issue
- #1910 Errors when sending email subscription but no information of the problem are provided
- #1908 Reference creation fails
- #1899 listEntitiesByHashes should not look for fuzzy algorithm to prevent unwanted merging
- #1897 Update Notion Links in Documentation
- #1884 Creating multiples
resolves-to
between a domain and an ip raises a cyclic relationship error - #1881 Export to PDF doesn't work in "Global Kill Chain" under Knowledge of Intrusion set
- #1879 GraphQL Pagination Query cursors not working
- #1828 Error Updating Author
- #1807 Descriptions modifications are sometimes not taken into account
Pull Requests:
- Change report types management to be only based on database values #1886 by @richard-julien in #1887
- Graphql api dependencies upgrade by @richard-julien in #1890
- Typescript api introduction by @richard-julien in #1894
- djds/dev by @djds in #1907
- Update the key of the Rust programming language by @guys1444 in #1920
New Contributors:
Full Changelog: 5.1.4...5.2.0