Yeti Versions Save

Your Everyday Threat Intelligence

2.1.6

3 weeks ago

Other Changes

Bump idna from 3.6 to 3.7 by @dependabot in https://github.com/yeti-platform/yeti/pull/1063
Remove usage of deprecated traverse() function by @tomchop in https://github.com/yeti-platform/yeti/pull/1066

Full Changelog: https://github.com/yeti-platform/yeti/compare/2.1.5...2.1.6

2.1.5

4 weeks ago

What's Changed

Enhancements 📈

API endpoints for DFIQ YAML validation by @tomchop in https://github.com/yeti-platform/yeti/pull/1039
Improve error handling in the API by @tomchop in https://github.com/yeti-platform/yeti/pull/1044
Improvement to LOLBAS feed by @tomchop in https://github.com/yeti-platform/yeti/pull/1045
Graph search can now select target vertices based on root_type (previously only leaf types) by @tomchop in https://github.com/yeti-platform/yeti/pull/1065

Bug fixes 🐛

Fix normalization in tags by @tomchop in https://github.com/yeti-platform/yeti/pull/1052
Add logout actions and session store (fixes #1041, fixes #1022) by @tomchop in https://github.com/yeti-platform/yeti/pull/1059
Fix OTX feed and tags for Mitre Attack by @sebdraven in https://github.com/yeti-platform/yeti/pull/1058
Export fixes by @tomchop in https://github.com/yeti-platform/yeti/pull/1060
Strongly type GraphResponse by @tomchop in https://github.com/yeti-platform/yeti/pull/1062

New feeds

Minor changes to LOLBAS indicators by @tomchop in https://github.com/yeti-platform/yeti/pull/1038
Fix regression in DFIQ feed by @tomchop in https://github.com/yeti-platform/yeti/pull/1043
LOLBas enhancements by @tomchop in https://github.com/yeti-platform/yeti/pull/1047
Change tor_exit_nodes feed to use the Tor Onionoo API + introduce tests by @itsmvd in https://github.com/yeti-platform/yeti/pull/1029
MISP SSL configuration updates by @shannaniggans in https://github.com/yeti-platform/yeti/pull/1053
Tweak feed actions by @tomchop in https://github.com/yeti-platform/yeti/pull/1056
Update lolbas.py by @shannaniggans in https://github.com/yeti-platform/yeti/pull/1055
Update OTX defaults in yeti.conf.sample by @sebdraven in https://github.com/yeti-platform/yeti/pull/1057
new feed TweetLive by @sebdraven in https://github.com/yeti-platform/yeti/pull/1061

Other Changes

Minor enhancements by @tomchop in https://github.com/yeti-platform/yeti/pull/1048

New Contributors

@shannaniggans made their first contribution in https://github.com/yeti-platform/yeti/pull/1053

Full Changelog: https://github.com/yeti-platform/yeti/compare/2.1.4...2.1.5

2.1.4

2 months ago

What's Changed

Enhancements 📈

Introduce ForensicArtifacts indicator type by @tomchop in https://github.com/yeti-platform/yeti/pull/1010
Introduce min / max hops to graph search by @tomchop in https://github.com/yeti-platform/yeti/pull/1019
Introduce search aliases (fixes #1001) by @tomchop in https://github.com/yeti-platform/yeti/pull/1021
Introduce tags to indicator objects by @tomchop in https://github.com/yeti-platform/yeti/pull/1026
Support registry keys in forensicartifacts by @tomchop in https://github.com/yeti-platform/yeti/pull/1028
Add API endpoints to swap links by @tomchop in https://github.com/yeti-platform/yeti/pull/1031

Bug fixes 🐛

Update pandas read_csv quoting values in multiple feeds by @0xRet in https://github.com/yeti-platform/yeti/pull/1023
Excluding Comment Lines from phishing_database Feed by @benmontour in https://github.com/yeti-platform/yeti/pull/1027

New feeds

Add Cisco Umbrella Top1M domains feed by @udgover in https://github.com/yeti-platform/yeti/pull/1013
Add Tranco top domains feed by @udgover in https://github.com/yeti-platform/yeti/pull/1015
Refactor the DFIQ import to import from local system as well by @tomchop in https://github.com/yeti-platform/yeti/pull/1018

Other Changes

Bump fastapi to 109 by @tomchop in https://github.com/yeti-platform/yeti/pull/1011
Push :dev labeled Docker images on each push to main by @tomchop in https://github.com/yeti-platform/yeti/pull/1012
Use arbitrary str instead of enum for querytype by @tomchop in https://github.com/yeti-platform/yeti/pull/1016
Bump python-multipart from 0.0.6 to 0.0.7 by @dependabot in https://github.com/yeti-platform/yeti/pull/1017
Minor optimizaitons by @tomchop in https://github.com/yeti-platform/yeti/pull/1020
Update dependencies by @tomchop in https://github.com/yeti-platform/yeti/pull/1032
Return tagged observables when bulk adding them by @tomchop in https://github.com/yeti-platform/yeti/pull/1033

Full Changelog: https://github.com/yeti-platform/yeti/compare/2.1.3...2.1.4

2.1.3

3 months ago

Major changes

DFIQ objects support
Bunch of new analytics (Shodan, Censys) and feeds (Wiz Threat Landscape, mining pools)
New import system from MISP JSON (still WIP)

What's Changed

Enhancements 📈

Feat: Support DFIQ objects by @tomchop in https://github.com/yeti-platform/yeti/pull/987
Switch between config file and envvar precedence by @udgover in https://github.com/yeti-platform/yeti/pull/978
Feat: add patch endpoint to observables by @tomchop in https://github.com/yeti-platform/yeti/pull/981
Feat: Wallet improvements by @udgover in https://github.com/yeti-platform/yeti/pull/982
Support IBAN & BIC observables by @p-l- in https://github.com/yeti-platform/yeti/pull/985

Bug fixes 🐛

Fix: exports path by @udgover in https://github.com/yeti-platform/yeti/pull/976
Fix: Change endpoints to avoid redirect by @tomchop in https://github.com/yeti-platform/yeti/pull/983
Feat: Reintroduce Expire Tags analytics by @tomchop in https://github.com/yeti-platform/yeti/pull/1000
Bug fix in Shodan config + add a test for it by @itsmvd in https://github.com/yeti-platform/yeti/pull/1004

New feeds

Feat: Add support for running Censys queries via analytics by @itsmvd in https://github.com/yeti-platform/yeti/pull/988
Add Wiz Threat Landscape feed by @udgover in https://github.com/yeti-platform/yeti/pull/996
Add support for running Shodan queries via analytics by @itsmvd in https://github.com/yeti-platform/yeti/pull/994
Import Misp Json format by @sebdraven in https://github.com/yeti-platform/yeti/pull/990
Add feed which imports domains and ipv4 mining pools from mining pool… by @udgover in https://github.com/yeti-platform/yeti/pull/995

Other Changes

Bump jinja2 from 3.1.2 to 3.1.3 by @dependabot in https://github.com/yeti-platform/yeti/pull/977
Update deps by @tomchop in https://github.com/yeti-platform/yeti/pull/973
Update yeti.conf.sample to include censys API config by @itsmvd in https://github.com/yeti-platform/yeti/pull/993
Add ruff + codebase pass by @tomchop in https://github.com/yeti-platform/yeti/pull/998

New Contributors

@itsmvd made their first contribution in https://github.com/yeti-platform/yeti/pull/988

Full Changelog: https://github.com/yeti-platform/yeti/compare/2.1.1...2.1.3

2.1.2

3 months ago

What's Changed

Enhancements 📈

Switch between config file and envvar precedence by @udgover in https://github.com/yeti-platform/yeti/pull/978
Feat: add patch endpoint to observables by @tomchop in https://github.com/yeti-platform/yeti/pull/981
Feat: Wallet improvements by @udgover in https://github.com/yeti-platform/yeti/pull/982

Bug fixes 🐛

Fix: exports path by @udgover in https://github.com/yeti-platform/yeti/pull/976
Fix: Change endpoints to avoid redirect by @tomchop in https://github.com/yeti-platform/yeti/pull/983

Other Changes

Bump jinja2 from 3.1.2 to 3.1.3 by @dependabot in https://github.com/yeti-platform/yeti/pull/977
Update deps by @tomchop in https://github.com/yeti-platform/yeti/pull/973

Full Changelog: https://github.com/yeti-platform/yeti/compare/2.1.1...2.1.2

2.1.1

4 months ago

What's Changed

Bug fixes 🐛

Fix: pydantic warning by replacing gte/lte with ge/le by @udgover in https://github.com/yeti-platform/yeti/pull/972
Fix: API key save when creating new user by @wajihyassine in https://github.com/yeti-platform/yeti/pull/974

New Contributors

@wajihyassine made their first contribution in https://github.com/yeti-platform/yeti/pull/974

Full Changelog: https://github.com/yeti-platform/yeti/compare/2.1.0...2.1.1

2.1.0

4 months ago

What's Changed

Enhancements 📈

Feat: Auditability (Closes #916) by @udgover in https://github.com/yeti-platform/yeti/pull/960
Feat: More structured response when calling bulk_add by @tomchop in https://github.com/yeti-platform/yeti/pull/962

Bug fixes 🐛

Fix: Add netloc to redirect after OIDC auth by @tomchop in https://github.com/yeti-platform/yeti/pull/958
Fix: issue when creating TagRelationship in filter method by @udgover in https://github.com/yeti-platform/yeti/pull/966
Fix: error when forcing type to "guess" by @tomchop in https://github.com/yeti-platform/yeti/pull/971
Fix: Adjust unicity indexes in Observables collection by @sebdraven in https://github.com/yeti-platform/yeti/pull/970

feeds

add reporter in context in context entry of Malware Bazaaar by @sebdraven in https://github.com/yeti-platform/yeti/pull/959

Other Changes

Compute field model by @udgover in https://github.com/yeti-platform/yeti/pull/953
Implement user account observable by @udgover in https://github.com/yeti-platform/yeti/pull/957
Disable logging when running tests by @udgover in https://github.com/yeti-platform/yeti/pull/964
Replace created field with timestamp by @udgover in https://github.com/yeti-platform/yeti/pull/965
Connect to yeti_test database when running tests by @udgover in https://github.com/yeti-platform/yeti/pull/967

Full Changelog: https://github.com/yeti-platform/yeti/compare/2.0.5...2.1.0

2.0.5

4 months ago

What's Changed

Enhancements 📈

Feat: Adds the ability to authenticate with a third-party OIDC provider by @tomchop in https://github.com/yeti-platform/yeti/pull/925
Feat: Extended observables API to accept extended attributes by @udgover in https://github.com/yeti-platform/yeti/pull/949

Bug fixes 🐛

Fix: calling save() doesn't overwrite all the object's contents (fixes #947) by @tomchop in https://github.com/yeti-platform/yeti/pull/954

Full Changelog: https://github.com/yeti-platform/yeti/compare/2.0.4...2.0.5

2.0.4

5 months ago

What's Changed

Enhancements 📈

Enable entity search by tags (fixes #901) by @tomchop in https://github.com/yeti-platform/yeti/pull/929

Bug fixes 🐛

Ignore revoked ATT&CK entities (fixes #912) by @tomchop in https://github.com/yeti-platform/yeti/pull/931
fixes #933 #934 by @sebdraven in https://github.com/yeti-platform/yeti/pull/941
Fetch tags for known observables (fixes #932) by @tomchop in https://github.com/yeti-platform/yeti/pull/944
Feed bugs by @sebdraven in https://github.com/yeti-platform/yeti/pull/942

Other Changes

Fix: Poetry install with --no-root by @tomchop in https://github.com/yeti-platform/yeti/pull/926
Add cron GitHub action to grab feeds (fixes #921) by @tomchop in https://github.com/yeti-platform/yeti/pull/930

Full Changelog: https://github.com/yeti-platform/yeti/compare/2.0.3...2.0.4

2.0.3

5 months ago

What's Changed

New feeds

Fix: Fixes some errors in various feeds by @sebdraven in https://github.com/yeti-platform/yeti/pull/909

Other Changes

Bump cryptography from 41.0.4 to 41.0.6 by @dependabot in https://github.com/yeti-platform/yeti/pull/913
cleanup: Checks that tags are the right type before attempting to add them by @udgover in https://github.com/yeti-platform/yeti/pull/918
Added source context to feeds where it was missing by @benmontour in https://github.com/yeti-platform/yeti/pull/914
Remove doc/ directory (fixes #911) by @tomchop in https://github.com/yeti-platform/yeti/pull/917
Add optional parameter to reset API key functions by @tomchop in https://github.com/yeti-platform/yeti/pull/923

New Contributors

@benmontour made their first contribution in https://github.com/yeti-platform/yeti/pull/914

Full Changelog: https://github.com/yeti-platform/yeti/compare/2.0.2...2.0.3