Pymisp

--------------------

New
~~~
- Add many comments in the jupyter notebook. [Raphaël Vinot]
- Return the new object in `add_object` [Raphaël Vinot]
- Add the ability to add Other attributes via the API. [Paul Stark]
- Tuto for MISPEvent. [Raphaël Vinot]
- Load Org and Orgc as MISPOrganisation. [Raphaël Vinot]

Related to 239

Changes
~~~~~~~
- Bump changelog, again. [Raphaël Vinot]
- Bump changelog & version. [Raphaël Vinot]
- Moar jupyter. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Add full example. [Raphaël Vinot]
- Add few more calls. [Raphaël Vinot]
- Fix sample retrieval from new-style zips. [Xavier Mehrenberger]
- Bump misp-objects. [Raphaël Vinot]
- Raise an exception if the response is not in JSON. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Bump changelog. [Raphaël Vinot]

Fix
~~~
- Index out of range in add_object. [Raphaël Vinot]

Other
~~~~~
- Enabled published search parameter for attributes controler. [Tobias
Mainka]
- Added unzip-flag. [Steffen Sauler]

added: download_samples(..., unzip=True)

--------------------

New
~~~
- Add edit_object, simplify add_object. [Raphaël Vinot]
- Properly implement the Email object creator. [Raphaël Vinot]

Changes
~~~~~~~
- Bump changelog. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump changelog. [Raphaël Vinot]
- Version bump. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Normalize the RestResponse calls. [Raphaël Vinot]

Fix
~~~
- Correct docstring of search method. [iso]
- Response data type mismatch in _send_attributes() [Raphaël Vinot]

Fix 206
- Wrong version. [Raphaël Vinot]
- Decoding issue. [Raphaël Vinot]
- Properly get and decode the body of the email. [Raphaël Vinot]
- Provide the extension of the EML file to attach. [Raphaël Vinot]
- Properly handle attachments. [Raphaël Vinot]
- Test cases & attributes automatically getting an UUID. [Raphaël Vinot]
- Typo in the *feed methods. [Raphaël Vinot]

Other
~~~~~
- Fix issue when adding multiple attributes and the instance is too
slow. [Raphaël Vinot]

--------------------

New
~~~
- Add more feed management methods. [Raphaël Vinot]

Fix 221
- Add update_attribute method. [Raphaël Vinot]
- Add event_timestamp to REST search. [Raphaël Vinot]

Fix 220
- Add helper for Geolocation object. [Raphaël Vinot]
- Add helper for ASN object. [Raphaël Vinot]
- More flexibility in <something> -> datetime. [Raphaël Vinot]
- Add helper for DomainIP. [Raphaël Vinot]
- Add preliminary fail2ban object. [Raphaël Vinot]

Changes
~~~~~~~
- Bump changelog. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Add more examples. [Raphaël Vinot]
- Remove useless timestamp cleanup. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Make object helpers more generic, cleanup. [Raphaël Vinot]
- Update fail2ban helper & example. [Raphaël Vinot]
- Bump misp-object. [Raphaël Vinot]

Fix
~~~
- Use the recommended approach to add an attribute. [Raphaël Vinot]
- Tests, new template version. [Raphaël Vinot]
- New key - extends_uuid. [Raphaël Vinot]
- Update test file accordingly to the default value. [Raphaël Vinot]
- Geolocation object filename. [Raphaël Vinot]
- Consider a timestamp < 30000000 as a date. [Raphaël Vinot]
- Typo. [Raphaël Vinot]
- AbstractMISP.from_dict() do not accept positional argument. [Sami
Mokaddem]
- Typo. [Raphaël Vinot]
- Properly create fail2ban object. [Raphaël Vinot]
- Add Info field to the event. [Raphaël Vinot]
- Disable email object for python <3.6. [Raphaël Vinot]

Other
~~~~~
- Added missing field to feed generator. [Andras Iklody]
- Add the ability to add an Autonomous System(AS) via the API. [Paul
Stark]
- Typo. [Sami Mokaddem]
- Changed shebang to python3. [Sami Mokaddem]
- Update default category for url as in
https://github.com/MISP/MISP/pull/3119. [Nils Kuhnert]
- Deleted remaining outputs. [Sami Mokaddem]
- First jupyter notebook tutorial (1 iterations) [Sami Mokaddem]
- Added change_analysis_status API. [Matteo Lodi]
- Fix add_named_attribute regression, update add_named_attribute.py
example. [user]
- Example of specifying special attribute type in your search: here yara
attribute. [Philippe Langlois]

--------------------

New
~~~
- Add email object generator. [Raphaël Vinot]
- Method to return an object by uuid. [chrisr3d]
- APIs to manage sharing groups. [Raphaël Vinot]

Fix 185
- ReturnMetaAttributes flag for freeTextImport API. [Raphaël Vinot]

Fix 188

Changes
~~~~~~~
- Bump Changelog. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Bump Changelog. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump Changelog. [Raphaël Vinot]
- Version bump. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump describeTypes (add mime) [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump describeType. [Raphaël Vinot]
- Bump describeType. [Raphaël Vinot]

Fix
~~~
- Test files. [Raphaël Vinot]
- Do not try to upload objects in case make_binary_objects fails.
[Raphaël Vinot]

Fix 192
- Typo. [chrisr3d]
- Update reference test cases. [Raphaël Vinot]
- Encode string in _encode_file_to_upload. [Raphaël Vinot]

Other
~~~~~
- Update README.md. [Sami Mokaddem]

Replaced WHAT by Description
- Update README.md. [Sami Mokaddem]

Added example of flush operation
- Added more examples. [Sami Mokaddem]
- Added usage in README. [Sami Mokaddem]
- Added MISPItemToRedis and updated readme accordingly. [Sami Mokaddem]
- Updated readme 2. [Sami Mokaddem]
- Updated readme. [Sami Mokaddem]
- Moved object constructor into their own folder. [Sami Mokaddem]
- Feature: Added support of MISP object constructor instead of the
generic_generator. [Sami Mokaddem]
- Added brief object description. [Sami Mokaddem]
- Removed unused function. [Sami Mokaddem]
- Generator handles file flushing itself. [Sami Mokaddem]
- Added description of generator object. [Sami Mokaddem]
- Updated README. [Sami Mokaddem]
- Creation of the generator object which permit to easily add attributes
and objects to daily events, stored as a MISP feed. Plus, script
fromredis which pops queue element in redis to put them in the feed.
[Sami Mokaddem]
- Added install script. [Sami Mokaddem]
- Added support of MISP Object. [Sami Mokaddem]
- Overhall seems to work, need testing. [Sami Mokaddem]
- Init draft of redis to feed. [Sami Mokaddem]
- Fix typo(s) [weslambert]
- Point to right anchor for client side certificates. [Richard van den
Berg]
- Add misp2cef example. [Richard van den Berg]
- Use from_dict. [Richard van den Berg]
- Add search on sighting. [ANSSI-BSO-D]

added the possibility to search sightings :
Here some example :
python
print(misp.sighting_list(424242))

The answer will give a sighting list corresponding to the attribute 424242.
python
print(misp.sighting_list(element_id=42, org_id=2, scope=event))

The return will be a sighting list of event 42 with a filter for organisation 2.
- Add attributes within objects as well, for tagging via value/id/uuid.
[Tobias Mainka]
- Prevent unpublished events to be included in feed. [Koen Van Impe]

Change default proposed config

--------------------

New
~~~
- Add bindings for Galaxies and Taxonimies. [Raphaël Vinot]
- Add bindings to PyMISPWarninglists. [Raphaël Vinot]

Changes
~~~~~~~
- Version bump. [Raphaël Vinot]
- Bump Changelog. [Raphaël Vinot]
- Skip sample upload test on python 3.4. [Raphaël Vinot]
- Re-enable python3.4 on travis... [Raphaël Vinot]
- Bump misp-object & describeTypes. [Raphaël Vinot]
- Cleanup new sbsignature generator. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Use defaultdict when possible. [Raphaël Vinot]
- Raise an exception when distribution is sharing group, but the ID is
missing. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Improve Object Attribute editing. [Raphaël Vinot]
- Allow to pass a directory with custom object templates. [Raphaël
Vinot]
- Remove old warning. [Raphaël Vinot]
- Bump Changelog. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Cleanup from last commit. [Raphaël Vinot]
- Move MISPTag to Abstract MISP. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Fix tests (new template version) [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Add test for loading existing malware sample from MISP. [Raphaël
Vinot]
- Multiple changes. [Raphaël Vinot]

* Fix timestamp dump (properly enforce UTC)
* Properly handle proposals
* Add many getter/setter
* Add dedicated test cases for MISPEvent and other objects
- Allow do pass a category in default_attributes_parameters for object.
[Raphaël Vinot]

fix 166
- Add MISPSighting class. [Raphaël Vinot]
- Bump Changelog. [Raphaël Vinot]

Fix
~~~
- Only skip test for 3.0->3.5. [Raphaël Vinot]
- Sys.api_version -> sys.version_info. [Raphaël Vinot]
- Allow to pass value, UUID, or ID to a sighting. [Raphaël Vinot]
- Do not use basicConfig in __init__ [Raphaël Vinot]

Fix 170
- Add_hashes was broken. [Raphaël Vinot]

Fix 174
- Make python2 happy. [Raphaël Vinot]
- Download old samples was broken. [Raphaël Vinot]
- Edited method works as expected, add tests. [Raphaël Vinot]
- Forgotten test files in last commit... [Raphaël Vinot]
- Disable_correlation from template not properly used. [Raphaël Vinot]
- Don't remove the distribution and sharing_group_id from
default_attributes_parameters. [Raphaël Vinot]
- The sharing_group_id isn't required. [Raphaël Vinot]
- Last commit was broken... [Raphaël Vinot]
- Properly set Tag to attributes within objects. [Raphaël Vinot]
- Add method to add tags to objects. [Raphaël Vinot]

Fix 160
- Typo in set_sightings. [Raphaël Vinot]

Fix 161

Other
~~~~~
- Revert "chg: Re-enable python3.4 on travis..." [Raphaël Vinot]

Lief doesn't support python 3.4

This reverts commit 35a8d92acecd7a313bedcf197539eaa82176bcc7.
- Add: Allow to fetch warninglists. [Raphaël Vinot]

Fix 180
- Add tag test. [Louis LCE]
- Add a simple test for uploading samples. [Louis LCE]
- Add warning when failing to import dependencies. [Louis LCE]
- Improve and refactor attributes tests. [Louis LCE]
- Sb-signature library. [garanews]

Created sb-signature library with relative example for testing.
Thanks dadokkio
- Linting. [Kory Kyzar]
- Bug fix. [Kory Kyzar]
- Change in add_attachment. Allow explicit attachment naming. [Kory
Kyzar]
- Change in new_tag function. Added attributie 'hide_tag' [Armīns Palms]
- Change the comment of attribute. [Armīns Palms]
- Fix add_hashes test function parameters. [Louis LCE]
- Added misp object templates path argument. [Tobias Mainka]
- Update settings.default.py. [Andras Iklody]
- Set_sightings. [AninaAntonie]

Maybe I didn't use it correctly but the method set_sightings didn't work for me. It's working now but I'm not sure whether sending a request for every sighting in the list is the best solution.
- _default_attributes_parameters - if set - is a dict. [Arcuri Davide]

Manage distribution and sharing_group_id as dict key like the other fields.
-- Not sure about default

--------------------

New
~~~
- Add last field to get_csv. [Raphaël Vinot]
- (hopefully) Cleverer handling of timestamps in the objects. [Raphaël
Vinot]

& some cleanup

Changes
~~~~~~~
- Bump misp-objects. [Raphaël Vinot]
- Version bump. [Raphaël Vinot]
- Update documentation. [Raphaël Vinot]
- Update documentation, cleanup. [Raphaël Vinot]
- Bump describeTypes.json. [Raphaël Vinot]
- Validate attributes in attributes.setter. [Raphaël Vinot]
- Add get_attribute_tag method at MISPEvent level. [Raphaël Vinot]

Also add a MISPTag class for consistency.
- Bump misp-objects. [Raphaël Vinot]
- Bump describeTypes. [Raphaël Vinot]
- Add __repr__ methods (fix last commit) [Raphaël Vinot]
- Add __repr__ methods. [Raphaël Vinot]
- Use new format for filtering. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump describeTypes. [Raphaël Vinot]

Fix
~~~
- Properly use the edited flag. [Raphaël Vinot]
- Add setter for Attribute in MISPEvent. [Raphaël Vinot]
- Forgotten calls to master class. [Raphaël Vinot]
- Properly call datetime.datetime.utcfromtimestamp. [Raphaël Vinot]
- Fix typo. [Raphaël Vinot]
- Fix python2.7 support. [Raphaël Vinot]
- Initialize default class parameters. [Raphaël Vinot]

Fix 155

Other
~~~~~
- Fix MISPObject missing distribution and sharing_group_id. [Christophe
Vandeplas]

- fix MISPObject missing distribution concept
- fix language typo paramaters => parameters
- Document submodule downloading. [Christophe Vandeplas]
- Include documentation and examples in source dist. [Sebastian Wagner]