-
Notifications
You must be signed in to change notification settings - Fork 88
/
CHANGES.txt
379 lines (327 loc) · 13.6 KB
/
CHANGES.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
Version 1.2.0.11
2020-11-16
- #367 Fix deprecation warning from collections module
Version 1.2.0.10
2020-05-01
- #366 Check add_reference methods to prevent NoneType has no attribute 'append'
- Changes to STIXPackage to prevent the empty <stix:TTPs/> tag from appearing in serialization
Version 1.2.0.9
2020-04-16
- #364 TTPs would fail to serialize XML Kill_Chains if no TTP was set
- Added Python 3.8 to test harness
Version 1.2.0.8
2020-03-09
- #357 Add xnl:Type to the PersonName element (CIQ)
- Update the allowable values for PersonName and OrganisationName
- Update tests per recent CybOX release
Version 1.2.0.7
2019-09-06
- Update package requirements
Version 1.2.0.6
2018-04-25
- #347 Property targeted_technical_details missing in VictimTargeting class
Version 1.2.0.5
2018-03-06
- #343 Create separate test environments for when maec is or is not installed
- #342 to_json fails on parsing datetime
- #339 [Python3 not supported - v1.1/1.2] to_json vaguely broken on some files
- #336 Report field ttp has the wrong type information
- #325 Bug in Indicator class setter for observables property
- Change stix.ToolInformation to use AttackerToolType vocab
- Removed Python 2.6 environment from CI tests
Version 1.2.0.4
2017-05-02
- Add support for Python 3.6.
- Update to latest mixbox.
- #319 Emit proper xsi:type for AISMarkingStructure.
- #317 Implement __hash__ for required objects
Version 1.2.0.3
2017-03-20
- #310 Support AIS Markings
Version 1.1.1.8
2017-01-18
- Update to support Python 3.
- Convert to use mixbox.
Version 1.2.0.2
2016-11-02
- #309 Correctly return a single observable from Indicator.observables.
- #306 Incorporate mixbox 1.0.1, which handles dates correctly.
- #303 Property serialize MAEC content to XML.
- #302 Correctly handle CIQ Identity objects.
- Add additional fields to CIQ Identity object.
Version 1.1.1.19
2020-11-16
- #367 Fix deprecation warning from collections module
Version 1.1.1.18
2020-05-01
- #366 Check add_reference methods to prevent NoneType has no attribute 'append'
- Changes to STIXPackage to prevent the empty <stix:TTPs/> tag from appearing in serialization
Version 1.1.1.17
2020-04-21
- #365 AISMarkingStructure not serializing correctly. PY3 compatibility issue
Version 1.1.1.16
2020-04-16
- #364 TTPs would fail to serialize XML Kill_Chains if no TTP was set
- Added Python 3.8 to test harness
Version 1.1.1.15
2020-03-09
- #357 Add xnl:Type to the PersonName element (CIQ)
- Update the allowable values for PersonName and OrganisationName
- Update tests per recent CybOX release
Version 1.1.1.14
2019-11-26
- #361 fix problem with lookup_extension for TestMechanism
Version 1.1.1.13
2019-09-06
- Update package requirements
Version 1.1.1.12
2018-04-25
- #347 Property targeted_technical_details missing in VictimTargeting class
Version 1.1.1.11
2018-03-21
- Fix issue with PyPI.
Version 1.1.1.10
2018-03-06
- #343 Create separate test environments for when maec is or is not installed
- #339 [Python3 not supported - v1.1/1.2] to_json vaguely broken on some files
- #338 VocabTypes are unhashable in 1.1.1.x on Python 3
- #325 Bug in Indicator class setter for observables property
- Change stix.ToolInformation to use AttackerToolType vocab
- Removed Python 2.6 environment from CI tests
Version 1.1.1.9
2017-05-25
- Support Python 3.6
- #321 Fix CIQ extensions.
Version 1.1.1.8
2017-01-18
- Update to support Python 3.
- Convert to use mixbox.
Version 1.1.1.7
2016-10-21
- Improved handling of Industry Sectors in CIQ Identity for AIS Markings
Version 1.1.1.6
2016-10-14
- Add support for AIS Markings in STIX 1.1.1
- Support additional fields in CIQ Identity
Version 1.2.0.1
2016-08-08
- Add support for Python 3.3+
- Use 'mixbox' library for features shared with python-cybox and python-maec.
- #292 Support organisation_info in STIXCIQIdentity.
- #276 Fix published_datetime on Vulnerability.
- #274 Correctly add TTPs to STIXPackage.
- #269, #271 Make STIXPackage version readonly.
- #266 Handle custom VocabString values even if they aren't registered.
Version 1.2.0.0
2015-05-15
- Support for parsing and creating STIX 1.2 content.
- Added VocabString implementations for deprecated default STIX controlled
vocabularies.
- Refactored internal class resolution for xsi:types.
- #262 Added support for STIX Report content
- #261 Added deprecation warnings when setting fields that have been
deprecated in STIX 1.2.
- #260 Added Versioning controlled vocabulary.
- #253 Added support for Kill Chain Phases and Related Pacakges on TTP
Version 1.1.1.5
2015-04-29
- #200 Refactored ns_dict behavior in to_xml() to allow custom namespace mappings
- #254 Added information_source to MarkingSpecification class.
- #188 Added nationalities to CIQ Identity extension.
- #246 Added coa_requested to Incident class.
- #248 Set include_schemalocs to False by default in to_xml()
- #249 Removed "Work In Progress" label from RTD documentation.
Version 1.1.1.4
2015-03-19
- #44 Added StructuredCOA support. This completes the COA structure.
- #75 Added support for non-list iterable collections in many add_foo()
methods and/or property setters.
- #90 Fixed Campaign.status bug which raised a TypeError
- #137 Added STIXPackage.add() method which adds input to the appropriate
top-level collection.
- #164 stix.utils.set_id_namespace() also sets the python-cybox id namespace.
- #187 Added support for OrganisationName and PersonName in CIQ Identity
extension.
- #189 The ns_dict parameter cannot alter default STIX/CybOX namespace mappings.
- #192 Added support for Related Campaigns on Indicator
- #197 Created a TypedList abstraction for non-STIX collection objects.
- #224 Added support for additional entries in the ns_dict parater on to_xml()
- #240 Added support for references field on Vulnerability
Version 1.1.1.3
2014-12-22
- #194, #220, #230 Standardized character encodings.
- #29 Consolidated common binding code.
- #96 Adding python-maec integration for MAEC Malware extension.
- #150 `STIXPackage.from_xml()` method accepts lxml etree object.
- #227 Fixed `to_obj()` in `TestMechanism` implementations
Version 1.1.1.2
2014-10-15
- #10 Partial fix. Improved CDATA handling in bindings and API classes.
Added stix.utils.cdata() and stix.utils.strip_cdata() methods.
- #29 Moved duplicated binding code to stix.bindings module
- #163 Performance enhancements in to_xml() serialization
- #148 #202 #210 #214 Fixed several issues with extensions.
- #171 Indicator @negate attribute not exported unless set
- #173 Versions on core constructs are only output if set by user.
- #174 Non-core constructs no longer get auto-assigned IDs.
- #184 Added `include_schemalocs` parameter to to_xml() for optional
schemalocation output
- #199 Improvements to data marking __init__ methods (thanks @benjamin9999!)
- #201 Added short_description property to stix.core.STIXHeader class
- #202 Fixed TOU marking schemalocation
- #209 Removed Python warning that is raised when trying to resolve
schemalocation for id namespace.
- #215 Fixed typos in Incident class (thanks @DavidWatersHub!)
- Added more docs to stix.readthedocs.org
Version 1.1.1.1
2014-08-12
- #133 Changed stix.core.ttps.TTPs to be iterable
- #139 Bug/typo fixes with confidence field on stix.indicator.Indicator
- #145 Updates to VocabString for support of non-default CVs
- #155 Added walk() and find() methods to stix.Entity class
- #154 #143 Added YaraTestMechanism and GenericTestMechanism extensions
- #157 Implemented handling on TTP
- Made stix.Entity.from_json() a classmethod
- Added more coverage to STIX constructs
Version 1.1.1.0
2014-05-09
- #132 Support for STIX v1.1.1
- Updated all schemalocations to reference new STIX v1.1.1 schemas
- Changed Confidence.source to be of type InformationSource
- Changed Statement.source to be of type InformationSource
- Changed Sighting.source to be of type InformationSource
- Updated AvailabilityLossType CV to align with STIX v1.1.1
Version 1.1.0.6
2014-05-06
- Fixed issues with parsing Related Observables within an Incident
- Adjusted names of data marking properties to align with list naming conventions
Version 1.1.0.5
2014-05-05
- Controlled Vocabulary (stix.common.vocabs.VocabString) overhaul
- All default STIX CV's have a corresponding VocabString derivation in stix.common.vocabs
- Each VocabString implementation performs input validation
- Each VocabString has static TERM_FOO values for each vocabulary term
- CV fields can now accept user-defined VocabString implementations
- Accepted Ubuntu installation documentation from @mgoldsborough, thanks!
- Pluralized list fields where the naming makes sense
- Adjusted many CV fields to promote plain strings to default CV type in property setter
- Added exploit_targets, kill_chains to TTP
- Added status to Campaign
- Added motivations and identity to ThreatActor
- Added kill_chain_phases, related_indicators to Indicator
- Added FreeTextLine, ContactNumber to CIQ Identity extension
- Added discovery_methods, security_compromise, information_source, related_incidents, coa_taken to Incident
- Added profiles to STIXHeader
- Initial cut at Sphinx documentation
Version 1.1.0.4
2014-02-31
- Added COAs, Exploit Targets, Campaigns, and Related Packages to STIXPackage class
- Updated behavior of id, idref, and timestamp on core STIX constructs to align with best practices
- Added MAEC malware extension
- Improved Identity extension mechanism
- Added Sightings to Indicator
- Updates to OpenIOC test mechanism extension
- Extensions now record input schemalocations on parse
- Added Alternative_ID support to Indicator
- Added support for Composite Indicator Expressions
- Added Handling support to Indicator
- Added several fields to COA and Exploit Target
- Bug fixes
Version 1.1.0.3
2014-02-24
- Added TTP structure (stix.ttp.TTP)
- Added COA structure (stix.coa.CourseOfAction)
- Added Campaign structure (stix.campaign.Campaign)
- Added Exploit Target structure (stix.exploit_target.ExploitTarget)
- Fixed bugs in CIQ extension classes
- Fixed bugs in namespace/schemalocation generation code
- Added *experimental* from_json() to base Entity class
- Added EntityList class for managing lists of STIX constructs in a more-pythonic manner
- Refactor of GenericRelationship and GenericRelationshipList classes
- Refactor of imports to reduce the amount of in-line, function scoped imports
- Added initial support for Snort Test Mechanism extension (stix.extensions.test_mechanism.snort_test_mechanism.SnortTestMechanism)
- Added initial support for OpenIOC 2010 Test Mechanism (stix.extensions.test_mechanism.openioc_2010_test_mechanism.OpenIOCTestMechanism)
- Updates to Indicator and Incident classes
Version 1.1.0.2
2014-02-25
- Fixed bug where exception would be thrown if parsing defaults were unset
- Added ETCompatXMLParser support to fix parsing bugs when XML comments were encountered
- Addded huge_tree support to EntityParser
Version 1.1.0.1
2014-02-22
- Added fields to Incident class
- Added test for CIQ Identity extension
- Fixed several CIQ Identity extension bugs
- Improved namespace parser performance
- Updated Incident test
- Added initial code for better support of non-standard id namespaces in input documents
Version 1.1.0.0
2014-02-20
- Compatible with STIX v1.1
- Refactored Data Marking code
- Added support for TLP Marking, Simple Marking, and Terms of Use Marking
- Added Handling support to STIXPackage
- Removed more unneeded code from bindings
- Added support for concrete ControlledVocabularyStringType instances
- Added initial implementation of Incident class
- Added initial implementation of Threat Actor class
- Fixed interface issues between python-stix and python-cybox
- Added tests for InformationSource, Confidence, Statement, and Data Marking tests
- Added GenericRelationship class
- Added EntityParser class which performs version and root element conformance checks prior to full parse
- Added support for DateTimeWithPrecision
- Added RelatedIndicator class
- Added support for Incident list in STIXPackage
- Various bugfixes
Version 1.0.1 Branch
--------------------
Version 1.0.1.1
2014-02-12
- Added more support for STIX v1.0.1
- Added updated bindings for STIX v1.0.1
- Updated extension bindings to leverage new STIX extension types and namespaces
- Fixed bug in setup.py that caused invalid versions of python-cybox to be installed via pip
- Accepted initial implementation of Data Markings pull request (thanks @zeroq!)
- Accepted bugfix pull requests (thanks @bgro!)
- Major refactor to namespace parsing and generation code
- Cleaned unused code from bindings
- Refactored stix.utility module into package with idgen, nsparser modules
Version 1.0.1.0
2013-08-13
- Initial support of STIX v1.0.1
- Updated versioning policy
- Fixed issue with CIQ Identity extension to_dict() call failing
Version 1.0 Branch
------------------
Version 1.0.0a7
2013-07-30
- Various bug fixes
Version 1.0.0a6
2013-07-29
- Added support for IndicatorType controlled vocabulary
- Added support for huge_tree in bindings parser
Version 1.0.0a5
2013-06-27
- Improved README documentation
- Fixed interface issues between python-stix and python-cybox classes
- Added support for additional namespaces to be added to STIXPackage.to_xml()
- Fixed installation issues with pip and setup.py
Version 1.0.0a4
2013-06-17
- Added support for Observables under STIX_Packages
- Fixed binding issues with Time element under Incident
Version 1.0.0a3
2013-05-122
- Added support for Travis CI continuous integration service (thanks @2xyo!)
- Fixed bugs that caused issues with Python 2.6
- Added fields to STIXHeader
- Added VocabString class
Version 1.0.0a2
2013-05-08
- Compatible with STIX 1.0 (final)
- Added ability to map namespaces to user-defined namespace aliases/prefixes
- Various bugfixes
Version 1.0.0a1
2013-04-22
- First (alpha) release on PyPI
- Compatible with STIX 1.0 Draft 2