Pymisp

--------------------

New
~~~
- Add methods to get taxonomy(ies) [Raphaël Vinot]

Thanks to truckydev
- Add method to get all the events modified in an interval. [Raphaël
Vinot]

Changes
~~~~~~~
- Bump misp-objects. [Raphaël Vinot]
- Bump Changelog. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Make the library easier to use. [Raphaël Vinot]
- Allow to pass a pseudofile to LIEF. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Update changelog. [Raphaël Vinot]

Fix
~~~
- Disable pseudofile support in py2, skip tests. [Raphaël Vinot]
- Typo in error output text description. [Eric Jaw]

Other
~~~~~
- Further tests added (for public methods) [Stefan Hagen (Individual)]
- Changed asserts from dict usecases to set comparison to workaround non
3.6 behavior. [Stefan Hagen (Individual)]
- Enhance coverage and fix en passant with focus on api. [Stefan Hagen
(Individual)]
- - Correction for 'last' param. 'last' gives the latest events that
have been published - add get_events_last_modified() this function
returns the modified events based on timestamp. [Tristan METAYER]

--------------------

New
~~~
- Add get CSV method. [Raphaël Vinot]

Changes
~~~~~~~
- Allow to pass a proxy to query VT. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Bump version to 2.4.83. [Raphaël Vinot]
- Do not get the event from the server before publishing if
PyMISP.publish gets an ID. [Raphaël Vinot]
- Add live tests for recommended pymisp version and describeTypes up-to-
date. [Raphaël Vinot]
- Add a way to check if the ACL is up-to-date. [Raphaël Vinot]
- Add validators for describeTypes on the live instance. [Raphaël Vinot]
- Update PDF link to doc. [Raphaël Vinot]
- Add example file to push OpenIOC file to MISP. [Raphaël Vinot]

chg: Add some imports in the tool's init file
- Bump misp-objects. [Raphaël Vinot]
- Change version number to master in the doc. [Raphaël Vinot]
- Add new objects: MISPUser and MISPOrganisation. [Raphaël Vinot]
- Add a generic MISP object generator. [Raphaël Vinot]
- Allow to add multiple attribute of the same type. [Raphaël Vinot]
- Add fast publish method. [Raphaël Vinot]

Fix 86
- Improve documentation. [Raphaël Vinot]

Fix 121

Fix
~~~
- Typo in the tests. [Raphaël Vinot]
- Typo in live tests. [Raphaël Vinot]
- Bump describeTypes.json. [Raphaël Vinot]

Add testing

Other
~~~~~
- Improve the exception message for a server 500+ response with no
response content. [StrayLightning]
- Check for zero-length 500 response from the server and produce a
suitable error message. [StrayLightning]

In experimenting with PyMISP I am triggering problems on the server I
am using. Occasionally the server will return a 500 response with a
message indicating an internal error, but more often than not it returns
a 500 response with no contents, and _check_response falls over itself,
generating hard-to-fathom exception from the json internals.

This commit hardens _check_response by detecting zero-length responses
and raising a suitable exception.

Also fix a missing bracket in one of the subsequent exception strings.
- Make FileObject creation work if lief parsing fails. [c-goes]
- Allow deletion of objects and object references. [c-goes]
- Update doc badge links. [Raphaël Vinot]
- Adding multiple named attributes require a single POST request now.
[3c7]
- Fixed typo. [c-goes]
- - Remove CIRCL reference from README.md - Updated 2 bad indentations
where epydoc was Warning. [Steve Clement]
- Added default_category for email-message-id. [c-goes]
- Rework of the feed generator. [iglocska]

- use objects, attribute tags and object references correctly
- generate quickhashlist for fast lookups / future MISP caching mechanism
- saner structure (herp-a-derp)

--------------------

New
~~~
- Proper debug system. [Raphaël Vinot]

Make it easy to investigate the json blobs sent to the server.

Changes
~~~~~~~
- Bump PyMISP version. [Raphaël Vinot]
- Bump CHANGELOG. [Raphaël Vinot]
- Bump misp-objects. [Raphaël Vinot]
- Update readme for new logging system. [Raphaël Vinot]
- Small improvments in the logging system. [Raphaël Vinot]
- Properly use python logging module. [Raphaël Vinot]
- Update asciidoctor generator. [Raphaël Vinot]
- Remove warning if PyMISP is too new. [Raphaël Vinot]
- Add simple asciidoc generator for MISP event. [Raphaël Vinot]
- Update changelog. [Raphaël Vinot]
- Version bump. [Raphaël Vinot]
- Update changelog. [Raphaël Vinot]
- Bump version. [Raphaël Vinot]
- Do not raise an exception when the object template is unknown.
[Raphaël Vinot]

+ bump misp-object
- Bump misp-objects. [Raphaël Vinot]
- Allow to hard delete an attribute by ID. [Raphaël Vinot]
- Update comments. [Raphaël Vinot]
- Bump misp-objects and describeTypes. [Raphaël Vinot]

Fix
~~~
- Typo loger -> logger. [Raphaël Vinot]
- Let load unknown object relations in known templates. [Raphaël Vinot]

This isn't recommended, but happens very often.
- Allow to load non-malware ZIP files in MISP Event. [Raphaël Vinot]

Prior to his patch, any zip file loaded by MISP Event was unpacked and
processed as an excrypted malware from MISP.
- Properly pass the distribution when uploading a sample. [Raphaël
Vinot]
- Properly upload a sample in an existing event. [Raphaël Vinot]

Fix https://github.com/MISP/PyMISP/issues/123
- Properly set the distribution at event level. [Raphaël Vinot]

fix 120
- Properly pop the distribution key. [Raphaël Vinot]
- Update dependencies for VT generator. [Raphaël Vinot]
- Properly bundle object templates. [Raphaël Vinot]
- Properly bundle object templates. [Raphaël Vinot]
- Fix typos and logic mistakes in mispevent. [Raphaël Vinot]
- Fix travis build. [Raphaël Vinot]
- Min required version of setuptools. [Raphaël Vinot]
- Improve dependencies listing. [Raphaël Vinot]

Partial fix for 110
- Missing default category. [Raphaël Vinot]

Fix 119

Other
~~~~~
- Fix test suite. [Raphaël Vinot]
- Created add_generic_object.py. [garanews]

usage: add_generic_object.py [-h] -e EVENT -t TYPE -d DICT

Examples:
python3 add_generic_object.py -e 1683 -t email -d '{"subject":"The Pink Letter", "to":"jonsnow.org"}'
python3 add_generic_object.py -e 2343 -t person -d '{"first-name":"Daenerys", "last-name":"Targaryen", "place-of-birth":"Dragonstone"}'
python3 add_generic_object.py -e 3596 -t "domain|ip" -d '{"domain":"stormborn.org", "ip":"50.63.202.33"}'
- Added vtreportobject and vt_to_misp example. [Thomas Gardner]
- Created add_generic_object.py. [garanews]

usage: add_generic_object.py [-h] -e EVENT -t TYPE -d DICT

Examples:
python3 add_generic_object.py -e 1683 -t email -d '{"subject":"The Pink Letter", "to":"jonsnow.org"}'
python3 add_generic_object.py -e 2343 -t person -d '{"first-name":"Daenerys", "last-name":"Targaryen", "place-of-birth":"Dragonstone"}'
python3 add_generic_object.py -e 3596 -t "domain|ip" -d '{"domain":"stormborn.org", "ip":"50.63.202.33"}'
- Update openioc.py. [Andras Iklody]
- Added **kwargs to add_named_attribute call in add_attachment.
[tssbo82]
- Update README. [Raphaël Vinot]
- Update changelog. [Raphaël Vinot]

--------------------

Changes
~~~~~~~
- Update changelog. [Raphaël Vinot]

Fix
~~~
- Changelog config + update. [Raphaël Vinot]
- Change readme. [Raphaël Vinot]
- Create file object. [Raphaël Vinot]

Was broken in case the file was neither PE/ELF/Mach-O
- Allow again to tag/delete unsaved attributes. [Raphaël Vinot]
- Live tests. [Raphaël Vinot]
- Import the openioc converter from tool again. [Raphaël Vinot]

Other
~~~~~
- Up: bump version. [Raphaël Vinot]
- Up: Bump misp-objects. [Raphaël Vinot]
- Up: Version bump. [Raphaël Vinot]
- Up: Bump misp-objects & describeTypes. [Raphaël Vinot]
- Update readme. [Raphaël Vinot]
- Similar to 114 on attribute level. [cgi1]

`add_attribute_tag(tag,attribute_identifier)` fails if attribute does not have any tag in before.
- Fixing 114. [cgi1]
- Formatted "Unknown MISP object" error message. [infosec-intern]

When a user tries to add an object with a name that doesn't exist, the error thrown was missing its format string
This ended up looking like
pymisp.exceptions.UnknownMISPObjectTemplate: {} is unknown in the MISP object directory.
Here's a patch that adds self.name to the format string
- TST: skip test with optional files if not existing. [Sebastian Wagner]
- TST: update test requirements. [Sebastian Wagner]
- Update: make make_binary_objects more flexible. [Raphaël Vinot]

fix: use proper exception handlers

--------------------
- Properly initialize a new malware sample. [Raphaël Vinot]
- Permission issue... [Alexandre Dulaunoy]
- Bump misp object. [Raphaël Vinot]
- Allow to get the list of known types out of MISPEvent again. [Raphaël
Vinot]
- Changed source => object / destination => referenced. [iglocska]
- Use MISPAbstract as a master class everywhere. [Raphaël Vinot]

This is probably breaking everything.... ¯\_(ツ)_/¯
- Bump miso-objects. [Raphaël Vinot]
- Changed two fields in object references. [iglocska]

- source_uuid => object_uuid
- destination_uuid => referenced_uuid
- Some more refactoring. [Raphaël Vinot]
- Some more refactoring and cleanup. [Raphaël Vinot]
- Update object definitions. [Raphaël Vinot]
- Update PE generator. [Raphaël Vinot]
- Refactoring in order to load objects. [Raphaël Vinot]
- Add support for multiple entries of the same type in an object.
[Raphaël Vinot]
- Remove some python versions from travis. [Raphaël Vinot]
- Do not try to run code requiring lief. [Raphaël Vinot]
- Remove ImportError. [Raphaël Vinot]
- Install deps in travis. [Raphaël Vinot]
- Update tests. [Raphaël Vinot]
- Do not fail if pymisp is not installed. [Raphaël Vinot]
- Add support for ELF and MachO objects. [Raphaël Vinot]
- Update get_template_id, cleanup. [Raphaël Vinot]
- Refactor all the things. [Raphaël Vinot]

Add script for MISP core, make everything generic.
- Fixing undefined ressources_path. [edhoedt]
- Update function names in mispevent. [Raphaël Vinot]
- Re-enable python < 3.5 support. [Raphaël Vinot]
- Update file/pe/pe-sections objects creator. [Raphaël Vinot]
- Doesn't require describe_types in MISPAttribute's constructor.
[Raphaël Vinot]
- Update accordingly to the current server implementation. [Raphaël
Vinot]
- Re-enable python2 support... [Raphaël Vinot]
- Initial commit supporting MISP Objects. [Raphaël Vinot]
- ChangeLog updated to the latest version. [Alexandre Dulaunoy]

--------------------

New
~~~
- Add ZMQ publishing method. [Hannah Ward]

Other
~~~~~
- Version bump. [Raphaël Vinot]
- Exact match on the value when adding tag. [Raphaël Vinot]
- Update README.md. [Deventual]
- Improve event ID detection in publish method. [Raphaël Vinot]
- Update api.py. [Deventual]
- Implemented much faster publish method to replace the old one.
[Deventual]

new publish method that is less resourceful and also having the ability to send emails (same as the web interface).
The method depends on the publish misp api method instead of update.
- Update path to roles API. [Raphaël Vinot]
- Fix typo in variable name. [Raphaël Vinot]
- Fixing undefined ressources_path. [edhoedt]
- Allow to load the event_id in MISPAttrbute. [Raphaël Vinot]
- Doesn't require describe_types in MISPAttribute's constructor.
[Raphaël Vinot]
- Fix shebangs and executable permissions. [Sebastian Wagner]

Files containing a shebang should be executable (examples/*.py)
Non-executable files should not contain a shebang (pymisp/...)

spotted with rpmlint
- Fix typo in the method name. [Raphaël Vinot]
- Update describe types. [Raphaël Vinot]
- Improve document generation. [Raphaël Vinot]
- Add test of the authkey, update warnings. [Raphaël Vinot]
- Remove useless import. [Raphaël Vinot]
- Search paramaters validation. [Raphaël Vinot]

Fix 96
- Allow to pass a bytestream to upload_sample. [Raphaël Vinot]

Fix 101
- Add sample for get_attachment. [Raphaël Vinot]
- Fix get_attachment. [Raphaël Vinot]

Fix 105
- Update describeTypes.json. [Raphaël Vinot]
- Allow to list roles and tags on a MISP instance. [Raphaël Vinot]
- Improve errors flattening. [Raphaël Vinot]