5.2.1

5.2.1 (2023-05-01)

Breaking changes:

• Change QRadar domain name mapping #1342. IBM QRadar Custom Properties Dictionary version 1.3.1 or later is now required to be installed.

Changes:

• update table of mappings for MS Graph, Elastic ECS, Microsoft Defender #1445
• Elastic-ecs mapping improvements for network traffic attributes #1410
• Update Reversinglabs connector #1436
• Documentation updates #1435
• Correct network-traffic mappings for elastic_ecs #1430
• Msatp with alerts refactor #1404
• MSATP async token, removed ADAL lib #1428
• Cleaning up from requests lib #1429
• IBM Verify Privilege Vault api path changes #1424
• Added async to Azure sentinal #1419
• Change config labels to sentence case #1417
• Update README for IBM Verify Privilege Vault (Secret Server) connector #1402
• hard coded base uri in microsoft graph security connector #1406
• Add metadata CLI and documenations #1396
• Pagination handled for azure_log_analytics #1398
• Elastic ecs module readme #1400

Fixes:

• fix url value property in azure mapping #1444
• Okta Error Code Mapping Changes for develop Branch #1434
• Fix: Graph API fails if used without lamda operators on collection type properties #1421
• Fix for Athena error handling, error log printing in tranlsation #1415
• Fixed error handling for darktrace on raw html response #1416

Dependency update:

• set urllib3 library requirement #1449
• Bump flask from 2.2.3 to 2.3.1 in /stix_shifter #1440
• Bump json-fix from 0.5.1 to 0.5.2 in /stix_shifter #1426
• Bump aioboto3 from 11.0.1 to 11.1.0 in /stix_shifter #1411
• Bump pyopenssl from 23.1.0 to 23.1.1 in /stix_shifter #1405
• Bump pyopenssl from 23.0.0 to 23.1.0 in /stix_shifter #1401