Releases: CybercentreCanada/assemblyline
Releases · CybercentreCanada/assemblyline
Release 4.4.0.8
Improvement
- Use
extract_passwords
method for potential passwords in OCR texta
Release 4.4.0.7
Feature
- Perform OCR on images for potential password extraction, add potentials to
temp_submission_data
Release 4.4.0.6
Bugfix
- If one update source raises
SkipSource
, then skip for sources with the same endpoint
Release 4.4.0.5
Optimizations
- Service updater's will perform an inventory check to automatically fetch material that is missing
- Service's with a
wait_for_update
flag set, will only scale when corresponding updater's are ready - Re-use cached downloaded material if multiple update sources target the same endpoint
v4.4.0.stable4
Enhancements
- Performance enhancements in service updaters.
- Improve error message given when services reach the retry limit.
- Launch updater containers with higher priority than service pods.
- Signature view now supports Suricata, ConfigExtractor, Sigma, API Vector, TagCheck and Yara signature highlighting.
Bugfixes
- Handle ignore filtering parameter interacting with service result cache keys.
- Increase default ram requests and limits.
v4.4.0.stable3: Merge pull request #48 from CybercentreCanada/FIPS_workaround
Service Base
- Moving Sysmon conversion from Sandbox services to service base
Assemblyline 4.4.0.2
Added support for TLP 2.0 on default classification engine
v4.4.0.stable13: Merge pull request #48 from CybercentreCanada/FIPS_workaround
Feature
- Include extractor's name (
config_extractor
) in MalwareConfig ontology sections
v4.4.0.stable12
Hotfix
- pin flask version pending updates
v4.4.0.stable11
Bugfix
- Ensure datastore addresses indices correctly for online resharding
- Handle redis disconnects correctly in pubsub module
- Have scaler check if nodes are ready before counting them for cpu quota
- Have services rate limit their checks for signature updates