Skip to content

misp-stix v2.4.186 - STIX 2.x import to MISP improved

Compare
Choose a tag to compare
@chrisr3d chrisr3d released this 21 Jun 09:48
· 355 commits to main since this release
0428b4a

v2.4.186 - 2024-02-27

Add

  • [stix2 import] Added organisation_uuid argument to use to generate the custom clusters UUID

Chg

  • [package, poetry] New version
  • [poetry] Bumped latest versions

Fix

  • [tests] Fixed tests for external STIX 2.x SDOs imported as Galaxy Clusters following the recent add of the organisation_uuid argument
  • [stix2 import] Avoiding issues with Marking Definition objects that are parsed and handle directly when they're loaded
  • [stix2 import] Setting single_event when parsing a bundle with a single report/grouping, to avoid issues raised with multiple reports/groupings handling methods
  • [stix2 import] Fixed the case with multiple events as result
  • [stix2 import] In the end we have to parse the Sighting & Opinion objects and convert them as MISP Sighting when they are used
  • [stix2 import] Fixed relationships handling between sighting & opinion objects, and their references
  • [stix2 import] Fixed MISP Sightings handling
  • [stix2 import] Avoiding issues with STIX 2.x content coming from a TAXII collection or embedded into a single list instead of a Bundle