Skip to content

Releases: dfir-iris/iris-web

v2.3.1

23 Jul 13:52
v2.3.1
62a09cf
Compare
Choose a tag to compare

What's Changed

Improved/Added

  • Overview page and quick view layout
  • Auto assignment of alerts when not assigned
  • Possibility to filter tags by clicking on them in alerts

Fixed

  • Call of modules when done from the modals
  • UI details

Full Changelog: v2.3.0...v2.3.1

v2.3.0

09 Jul 17:49
v2.3.0
47ab149
Compare
Choose a tag to compare

What's Changed

Added

  • Collaborative editor in notes
  • Possibility to add case peer-reviews
  • Alerts resolution status
  • Auto closing of alerts with resolution for linked alerts
  • New webhook module
  • Enhanced overview page
  • Attributed open cases in dashboard
  • Assets and IOCs multi-additions from the UI
  • New UI design

Fixed

  • Password change for users
  • Description breaking in alerts and events
  • Missing icons in MD rendering for know links
  • Alerts rendering

New Contributors

Full Changelog: v2.2.3...v2.3.0

v2.2.3

19 Jun 15:35
f435add
Compare
Choose a tag to compare

What's Changed

Added

  • Possibility to use LDAP and local auth as fallback
  • Possibility to add multiple IOCs at once from the UI
  • Possibility to add multiple assets at once from the UI
  • Support for hooks and module calls in alerts
  • URL redirection after login

Fixed

  • Similarities in alerts when no assets are provided
  • Assertion of data in marshmallow
  • MD editor new lines handling
  • Unicode in datastore
  • Alerts share links
  • Modules info when registering a module
  • UI fixes

Full Changelog. v2.2.2...v2.2.3

v2.2.2

30 May 15:16
v2.2.2
25f4592
Compare
Choose a tag to compare

What's Changed

Added

  • Possibility to pivot on assets and IOCs from the alerts graph

Fixed

  • Delete character escaping for passwords by @juadde in #253
  • Case template of tasks without tags
  • Shortening of case names during updates
  • Bad handling of certain requests without CID
  • Deletion of assets related to alerts once merge into a case

Full Changelog: v2.2.1...v2.2.2

v2.2.1

24 May 13:25
v2.2.1
e3141d0
Compare
Choose a tag to compare

What's Changed

Note 1: This version contains a security fix for iris-web.
Note 2: on_postload_case_info_update hook has been renamed to on_postload_case_update

Added

  • Add newly created users after a LDAP authentication to group Analysts by @c8y3 in #247

Fixed

  • Security fix of CVE-2023-30615 - GHSA-gc6j-6276-2m49 impacting iris-web < v2.2.1
  • Deletion of cases with assigned tasks
  • Merge of multiple alerts
  • Import of IOCs and Assets in case multiple alerts are merged

Full Changelog: v2.2.0...v2.2.1

v2.2.0

22 May 19:55
v2.2.0
0aa77f6
Compare
Choose a tag to compare

What's Changed

Added

  • Basic csv events file import (with default options) by @realsec in #240
  • New endpoints to search for manageable objects such as assets types etc,
  • New search by asset IDs, IOC IDs and events IDs in the timeline

Fixes

  • Some configuration checks when LDAP and automatic user creation are set by @c8y3 in #246
  • Ensure database connectivity before trying to create tables by @weslambert in #248
  • Merge of multiple alerts in one case not merging the IOCs and assets
  • Bug allowing to add an asset to a timeline not belonging to the same case
  • UI bug fixes

New Contributors

Full Changelog: v2.1.0...v2.2.0

v2.1.0

15 May 07:59
v2.1.0
9cde605
Compare
Choose a tag to compare

Introduction of alerts and case templates 🎉

If you are using custom SSL certificates, please read the upgrade instructions when upgrading from previous versions.

What's Changed

Added

  • Full support of alerts
  • Case templates
  • Provisioning of users
  • Service accounts
  • New permissions

Fixed

  • Variable LDAP_AUTHENTICATION_TYPE in .env.model by @c8y3 in #217
  • Automatic creation of users with ldap authentication by @c8y3 in #227
  • Update nginx.conf for Security HTTP headers to work. by @oikuda in #216
  • Columns in manage cases #205
  • Customer contact deletion #239
  • Search permissions #237
  • Customer permissions #235
  • Toast split #226
  • Assets exporting #224
  • Assets IOC filtering #223
  • ADM username not enforced #218
  • JIT provisioning of users in LDAP #203

New Contributors

Full Changelog: v2.0.2...v2.1.0

v2.0.2

18 Apr 12:42
v2.0.2
adf5490
Compare
Choose a tag to compare

What's Changed

Fixed

  • Update case_notes_db.py for bug fix #200 by @LoneWolf-96 in #208
  • Do not escape_filter_chars for NTLM username by @juadde in #212
  • docker-compose cleanup by @juadde in #213
  • Listening port not being propagated in nginx docker

New Contributors

Full Changelog: v2.0.1...v2.0.2

v2.0.1

05 Apr 12:56
v2.0.1
0e59540
Compare
Choose a tag to compare

What's Changed

  • [FIX] Additional table header in case management breaking proper loading of data in #206

Full Changelog: v2.0.0...v2.0.1

v2.0.0

26 Mar 08:36
v2.0.0
e5e0ea3
Compare
Choose a tag to compare

New version with major changes and improvements 🎉
Please carefully read the upgrade instructions when upgrading from previous versions.

What's Changed

Added

  • Groups management
  • Case access control and basic permissions
  • Comments support on a call objects
  • Markdown editors in all case objects
  • Customers dedicated pages with additional information and cases statistics
  • LDAP authentication
  • Markdown reporting
  • Case owners, classifications, outcome and tags
  • Possibility to update case basic information
  • Case overview page
  • Unique UUID on all case objects
  • Multiple assignee support in case tasks
  • Deletion confirmation prompt on all case objects as an option
  • IOC in events plus optional synchronization with assets
  • Events flagging in the timeline
  • MD links on every case objects
  • Make Celery host configurable by @Matthijsy in #128
  • Add value validation for iocs by @Matthijsy in #130
  • Docx report enhancements by @LukyLuke in #127
  • Integrating new report formats by @DoctorSauerkraut in #177
  • Add Azure Key Vault and standardize configuration variables by @Matthijsy in #137
  • Add IocAssetLink upon event update by @sprungknoedl in #186

Fixed

New Contributors

Full Changelog: v1.4.5...v2.0.0