1.1.0 ContactDB Audit Log

• Audit Log
  • Add a new table audit_log, used by fody
  • Use JSONB instead of JSON for annotation tables, which allows comparisons
  • add script to expire all tags in database
    • Add an expiry date to all existing annotations matching a configurable tag pattern
    • All annotations of an organisation expire at the same day
    • The expire dates are spread over a configurable time window
  • add script to delete expired tags, with audit log
• Documentation:
  • 0.9.5 sql update: fix SQL command
  • fix version numbers in UPDATE.md
• Packaging:
  • rename examples/ to scripts/
  • package the scripts, as docs
• Tests:
  • remove print statement, add GitHub check for it
  • tests: add annotation test for empty string expires field

1.0.2: Tag expiry date

Add tag expiry, plus evaluation and tests

Tags have now an optional expiry date, for example {"tag": "name", expires: "2024-07-19"}
Tags expire after the given date has passed.
Only dates are supported.

Rulesupport

• Context.ensure_data_consistency: ensure matches is type list
• Annotation: fix repr output syntax
• New Annotation.expired property
• Annotation.matches also checks the expiry
• Context.all_annotations and Organisation.all_annotations only return non-expired annotations

Example rules

• update inhibition (whitelist) example rule
• rename 'botnet drone' to infected-system

Internal and development

• rename annotations import to prevent name clash
• setup.cfg: ignore some rules and directories
• Fix tests: import names, event syntax update
• rulesupport: remove obsolete import statements

Documentation

• Mailgen documentation: link to rendered docs

Full Changelog: 1.0.1...1.0.2

1.0.1: Template Validations, UI optimizations

template name validation on name change
backend: verbose error message for empty template in preview
client: improve default column field names
client: template deletion safety question
client+backend: live feedback template syntax check
frontend, mailgen: optimize UI components placement
frontend: disable classification fields in dryrun

Full Changelog: v0.9.9...1.0.1

0.9.9: make bots subclasses of ExpertBot

v0.9.9

0.9.9: make bots subclasses of ExpertBot

Small fixes and internal changes

• add Context.pop for deleting event fields
• Context.get: add args and kwargs, allows default values
• example rules: fix logging: convert to strings
• example rules: use logger parameter for formatting

0.9.7: Package and Packaging fixes

• rules expert: raise if intelmqmail cannot be imported
• and list intelmqmail as python package dependency

0.9.6: Bugfix

• Fix exception after reload by using _internal variable names only.
• remove shebangs from non-executable scripts

0.9.5: IntelMQ 3.0 compatibility

v0.9.5

0.9.5: IntelMQ 3.0 compatibility

0.9.4: E-Mail associated Tags

See UPDATE.md for the changes