Releases: dfir-iris/iris-web
v2.3.1
What's Changed
Improved/Added
- Overview page and quick view layout
- Auto assignment of alerts when not assigned
- Possibility to filter tags by clicking on them in alerts
Fixed
- Call of modules when done from the modals
- UI details
Full Changelog: v2.3.0...v2.3.1
v2.3.0
What's Changed
Added
- Collaborative editor in notes
- Possibility to add case peer-reviews
- Alerts resolution status
- Auto closing of alerts with resolution for linked alerts
- New webhook module
- Enhanced overview page
- Attributed open cases in dashboard
- Assets and IOCs multi-additions from the UI
- New UI design
Fixed
- Password change for users
- Description breaking in alerts and events
- Missing icons in MD rendering for know links
- Alerts rendering
New Contributors
- @manjularajamani made their first contribution in #263
- @s3lva-kumar made their first contribution in #276
Full Changelog: v2.2.3...v2.3.0
v2.2.3
What's Changed
Added
- Possibility to use LDAP and local auth as fallback
- Possibility to add multiple IOCs at once from the UI
- Possibility to add multiple assets at once from the UI
- Support for hooks and module calls in alerts
- URL redirection after login
Fixed
- Similarities in alerts when no assets are provided
- Assertion of data in marshmallow
- MD editor new lines handling
- Unicode in datastore
- Alerts share links
- Modules info when registering a module
- UI fixes
Full Changelog. v2.2.2...v2.2.3
v2.2.2
What's Changed
Added
- Possibility to pivot on assets and IOCs from the alerts graph
Fixed
- Delete character escaping for passwords by @juadde in #253
- Case template of tasks without tags
- Shortening of case names during updates
- Bad handling of certain requests without CID
- Deletion of assets related to alerts once merge into a case
Full Changelog: v2.2.1...v2.2.2
v2.2.1
What's Changed
Note 1: This version contains a security fix for iris-web.
Note 2: on_postload_case_info_update
hook has been renamed to on_postload_case_update
Added
Fixed
- Security fix of CVE-2023-30615 - GHSA-gc6j-6276-2m49 impacting iris-web < v2.2.1
- Deletion of cases with assigned tasks
- Merge of multiple alerts
- Import of IOCs and Assets in case multiple alerts are merged
Full Changelog: v2.2.0...v2.2.1
v2.2.0
What's Changed
Added
- Basic csv events file import (with default options) by @realsec in #240
- New endpoints to search for manageable objects such as assets types etc,
- New search by asset IDs, IOC IDs and events IDs in the timeline
Fixes
- Some configuration checks when LDAP and automatic user creation are set by @c8y3 in #246
- Ensure database connectivity before trying to create tables by @weslambert in #248
- Merge of multiple alerts in one case not merging the IOCs and assets
- Bug allowing to add an asset to a timeline not belonging to the same case
- UI bug fixes
New Contributors
- @realsec made their first contribution in #240
- @weslambert made their first contribution in #248
Full Changelog: v2.1.0...v2.2.0
v2.1.0
Introduction of alerts and case templates 🎉
If you are using custom SSL certificates, please read the upgrade instructions when upgrading from previous versions.
What's Changed
Added
- Full support of alerts
- Case templates
- Provisioning of users
- Service accounts
- New permissions
Fixed
- Variable LDAP_AUTHENTICATION_TYPE in .env.model by @c8y3 in #217
- Automatic creation of users with ldap authentication by @c8y3 in #227
- Update nginx.conf for Security HTTP headers to work. by @oikuda in #216
- Columns in manage cases #205
- Customer contact deletion #239
- Search permissions #237
- Customer permissions #235
- Toast split #226
- Assets exporting #224
- Assets IOC filtering #223
- ADM username not enforced #218
- JIT provisioning of users in LDAP #203
New Contributors
Full Changelog: v2.0.2...v2.1.0
v2.0.2
What's Changed
Fixed
- Update case_notes_db.py for bug fix #200 by @LoneWolf-96 in #208
- Do not escape_filter_chars for NTLM username by @juadde in #212
- docker-compose cleanup by @juadde in #213
- Listening port not being propagated in nginx docker
New Contributors
- @LoneWolf-96 made their first contribution in #208
- @juadde made their first contribution in #212
Full Changelog: v2.0.1...v2.0.2
v2.0.1
v2.0.0
New version with major changes and improvements 🎉
Please carefully read the upgrade instructions when upgrading from previous versions.
What's Changed
Added
- Groups management
- Case access control and basic permissions
- Comments support on a call objects
- Markdown editors in all case objects
- Customers dedicated pages with additional information and cases statistics
- LDAP authentication
- Markdown reporting
- Case owners, classifications, outcome and tags
- Possibility to update case basic information
- Case overview page
- Unique UUID on all case objects
- Multiple assignee support in case tasks
- Deletion confirmation prompt on all case objects as an option
- IOC in events plus optional synchronization with assets
- Events flagging in the timeline
- MD links on every case objects
- Make Celery host configurable by @Matthijsy in #128
- Add value validation for iocs by @Matthijsy in #130
- Docx report enhancements by @LukyLuke in #127
- Integrating new report formats by @DoctorSauerkraut in #177
- Add Azure Key Vault and standardize configuration variables by @Matthijsy in #137
- Add IocAssetLink upon event update by @sprungknoedl in #186
Fixed
- Notes in Reports broken: recursive empty list instead notes list by @LukyLuke in #146
- #151 Asset unknown compromise in #156
- #193
- #188
- #184
- #181
- #171
- #169
- #168
- #167
- #166
- #164
- #162
- #161
- #160
- #153
- #152
- #151
- #150
- #140
- #134
- #132
- #126
- #124
- #121
- #120
- #106
- #66
- #62
- #61
- #49
New Contributors
- @Matthijsy made their first contribution in #128
- @LukyLuke made their first contribution in #127
- @DoctorSauerkraut made their first contribution in #177
- @sprungknoedl made their first contribution in #186
Full Changelog: v1.4.5...v2.0.0