Changelog
For upgrades instructions, please see the Upgrades page.
v2.4.16 November 9, 2024
What's changed
- Fixes an issue preventing to use hybrid mode with OIDC / Local when MFA is enabled
v2.4.15 November 9, 2024
What's changed
- Fixes memory issues in alerts leading to memory exhaustion
- Adds filter fir alert source ref
- Adds new relations in alerts for future use
- Better UI for comments indicators
v2.4.14 October 1st, 2024
What's changed
- Fixes error when deleting a case with notes revisions
- Fixes alerts similarities associated with alternate customers
- Improves alerts graph by adding more info at a glance
- Adds additional filters on alerts
v2.4.13 September 14, 2024
What's changed
- Add OIDC in beta
- Fix broken merge of alerts in assets
- Fix alerts and customers checks
v2.4.12 August 28, 2024
What's changed
- Added module to support Seika.io
- Improved IRIS Webhook module
- Fixed spelling in editors
v2.4.10 July 29, 2024
What's changed
Fixed
* Issue with errornous outcome setting in cases
v2.4.9 July 17, 2024
What's changed
Fixed
* Issue with notes revisions assigning wrong user to the revision
v2.4.8 July 16, 2024
What's changed
Added * Publication of the docker images on Github Container Registry (GHCR) * New GraphQL API endpoints for IOCs and cases * Automatic load of alerts relations * Notes revisions history
Fixed
* Mutliple issues
v2.4.7 March 18, 2024
What's changed
Fixed
* Issues in the datastore preventing to upload multiple files
v2.4.6 March 18, 2024
What's changed
⚠️ Important changes are done in the Access Control. If you are upgrading, please carefully read the upgrades instructions. The layout of the reports has been changed. Reports template need to be upgraded as well.
Improved
- New notes layout
- New timeline layout with tree view
- New timeline feature allowing to create child events
- New access control feature allowing to associate users with customers
- CI/CD init by @c8y3 in #401, #400, #402
Fixed
- Fix CSS issue by @whikernel in #377
- Fixes addition of case templates in #379
- Fix issues with case templates usage in #381
- Fix issue with IOC lookups in the timeline in #382
- Fix major collaboration issue in notes in #385
- Fix PG Extension not being setup properly in #390
- Fix multiple security issues impacting case reports and editors
New Contributors
- @MikaelFangel made their first contribution in #414
v2.3.7 December 14, 2023
What's Changed
Fixed
- Fixes an issue with download of files from the datastore #347
- Fixes an issue with the addition of protagonist in cases
- Fixes an issue with case edition modal
Improved
- Improved timeline rendering
- Improved security in Datatables
v2.3.6 December 7, 2023
What's Changed
Fixed
- Fixes an error preventing the proper generation of reports
- Fixes an issue with filtering in the overview tab
- Adds more filtering options in the overview tab
v2.3.5 November 30, 2023
What's Changed
Fixed
- Fixes an issue introduced in v2.3.4 where the cases metadata are not properly saved.
v2.3.4 November 29, 2023
A severe bug has been introduced in this version. Please upgarde to v2.3.5.
What's Changed
Added
- Added support for evidences types
- Added support for cases severity
- Improved search in context switcher
Fixed
- Fixed overview page
- Fixed dashboard filtering
❗ The layout of the reporting has slightly changed. Custom report templates might not work anymore.
You can use https://<server>/case/export?cid=<case_id> to get all the possible fields.
v2.3.3 October 5, 2023
What's Changed
Fixed
- Fixed breaking of manage case list if percentage in title
- Fixed broken title search in overview
- Fixed sorting of owners in overview
- Fixed quick look in overview
- Fixed alert page breaking if username contains trailing space
- Fixed IrisVTModule links
- Fixed IrisWebhookModule
- Fixed refresh after closing of notes
@Scriptception made their first contribution in 313
v2.3.2 August 2, 2023
What's Changed
Fixed
Patches a critical issue corrupting files uploaded to the DataStore via the IOC option or when a password is set
v2.3.1 July 23, 2023
What's Changed
Improved
- Overview page and quick view layout
- Auto assignment of alerts when not assigned
- Possibility to filter tags by clicking on them in alerts
Fixed
- Call of modules when done from the modals
- UI
v2.3.0 July 09, 2023
What's Changed
Added
- Collaborative editor in notes
- Possibility to add case peer-reviews
- Alerts resolution status
- Auto closing of alerts with resolution for linked alerts
- New webhook module
- Enhanced overview page
- Attributed open cases in dashboard
- Assets and IOCs multi-additions from the UI
- New UI design
Fixed
- Password change for users
- Description breaking in alerts and events
- Missing icons in MD rendering for know links
- Alerts rendering
v2.2.3 June 19, 2023
What's Changed
Added
- Possibility to use LDAP and local auth as fallback
- Possibility to add multiple IOCs at once from the UI
- Possibility to add multiple assets at once from the UI
- Support for hooks and module calls in alerts
- URL redirection after login
Fixed
- Similarities in alerts when no assets are provided
- Assertion of data in marshmallow
- MD editor new lines handling
- Unicode in datastore
- Alerts share links
- Modules info when registering a module
- UI fixes
v2.2.2 May 30, 2023
What's Changed
Added
- Possibility to pivot on assets and IOCs from the alerts graph
Fixed - Delete character escaping for passwords by @juadde in #253 - Case template of tasks without tags - Shortening of case names during updates - Bad handling of certain requests without CID - Deletion of assets related to alerts once merge into a case
v2.2.1 May 24, 2023
What's Changed
Note 1: This version contains a security fix for iris-web (see CVE-2023-30615)
Note 2: on_postload_case_info_update hook has been renamed to on_postload_case_update
Added
- Add newly created users after a LDAP authentication to group Analysts by @c8y3 in #247
Fixed
- Security fix of CVE-2023-30615 - GHSA-gc6j-6276-2m49 impacting iris-web < v2.2.1
- Deletion of cases with assigned tasks
- Merge of multiple alerts
- Import of IOCs and Assets in case multiple alerts are merged
v2.2.0 May 22, 2023
What's Changed
Added
- Basic csv events file import (with default options) by @realsec in #240
- New endpoints to search for manageable objects such as assets types etc,
- New search by asset IDs, IOC IDs and events IDs in the timeline
Fixes
- Some configuration checks when LDAP and automatic user creation are set by @c8y3 in #246
- Ensure database connectivity before trying to create tables by @weslambert in #248
- Merge of multiple alerts in one case not merging the IOCs and assets
- Bug allowing to add an asset to a timeline not belonging to the same case
- UI bug fixes
New Contributors
v2.1.0 May 15, 2023
If you are using custom SSL certificates, please read the upgrade instructions when upgrading from previous versions.
What's Changed
Added
- Full support of alerts
- Case templates
- Provisioning of users
- Service accounts
- New permissions
Fixed
- Variable LDAP_AUTHENTICATION_TYPE in .env.model by @c8y3 in #217
- Automatic creation of users with ldap authentication by @c8y3 in #227
- Update nginx.conf for Security HTTP headers to work. by @oikuda in #216
- Columns in manage cases #205
- Customer contact deletion #239
- Search permissions #237
- Customer permissions #235
- Toast split #226
- Assets exporting #224
- Assets IOC filtering #223
- ADM username not enforced #218
- JIT provisioning of users in LDAP #203
New Contributors
v2.0.2 April 18, 2023
What's Changed
Fixed
* Update case_notes_db.py for bug fix #200 by @LoneWolf-96 in #208
* Do not escape_filter_chars for NTLM username by @juadde in #212
* docker-compose cleanup by @juadde in #213
* Listening port not being propagated in nginx docker
New Contributors
* @LoneWolf-96 made their first contribution in #208
* @juadde made their first contribution in #212
v2.0.1 April 05, 2023
What's Changed
Fixed [FIX] Additional table header in case management breaking proper loading of data in #206
v2.0.0 March 26, 2023
What's Changed
In addition to the features listed below, we are changing the way we are issuing releases. From now on, IRIS follows the Semantic Versioning 2.0 guidelines.
The code ready for production is always tagged with a version number.
alpha and beta versions are not production-ready.
Do not use the master branch in production.
A website with the current development version is also provided and freely accessible. It serves as a beta before public releases.
Added
- Groups management
- Case access control and basic permissions
- Comments support on a call objects
- Markdown editors in all case objects
- Customers dedicated pages with additional information and cases stats
- LDAP authentication
- Markdown reporting
- Case owners, classifications, outcome and tags
- Possibility to update case basic infornations
- Case overview page
- Unique UUID on all case objects
- Multiple assignees support in case tasks
- Deletion confirmation prompt on all case objects as an option
- IOC in events plus optional synchronization with assets
- Events flagging in the timeline
- MD links on every case objects
Improved
- Dark mode
- Uniformity of modals
- Overall UI and UX
- Compromised status in assets
- Error reporting in the UI
Fixed
- Manual call of modules when multiple modules are availables
- Multiples bugs fixes
- Security fixes
v1.4.5 June 9, 2022
What's Changed
- Added a datastore in #115, fixes #30 :
- Upload and store any files on IRIS
- Password protect them as an option
- Download
- Add to IOC and/or evidences automatically
- Reference to files in notes, summary or any textual input
- Copy/paste of images directly in notes and summary
- Virtual folders to arrange files
- Ability to configure password policy in #117, fixes #116
- Dark mode improved, flickering removed
- Multiples bugs fixes
- Security fixes
Notes: Changes are made to the Nginx docker to allow upload of big files, hence specific upgrades are needed and auto-updates is not yet supported for this version. Please see the upgrades instruction for more details.
v1.4.4 May 18, 2022
What's Changed
- Implementation of bulk events editing by @sebastiandemmer in #110
- Fixes context switch button doesn't load cases by @DevJoost in #112
- Fixes multiple minor bugs
v1.4.3 May 13, 2022
What's changed
- Managed IRIS updates from itself
- Custom icons for assets - fixes #44 by @sebastiandemmer
- IOCs link in timeline and graph - fixes #50
- History of modifications in timeline
- User id in timeline export as an option - fixes #65
- Backup of database from the interface
- Minimisation of modals in cases
- New UI improvements in timeline
- New minimal notifications for almost all activities
- Improved overall responsiveness and speed
- Improved error feedbacks to users
- Improved load of tasks results by x10
- Code cleaning
- Multiple bug fixes
v1.4.2 April 22, 2022
Improvements :
- Possibility to duplicates events in timeline - #91
- Possibility to filter timeline with basic query - #94
Fixes :
- Integer limit on file size in evidences - #89
- Gradient in closed cases
- on-preload hooks list handling - #92
- tags issue - #88
- Case info modal from case - #93
- Multiple UI issues
v1.4.1 April 8, 2022
- Fixes a scrolling issue of the timeline when events are being popped
v1.4.0 April 6, 2022
A bug fixe exists for this version. See v1.4.3
- Hooks, adding the ability for modules to react on almost anything happening on the plateform in #75
- New type of modules that can handles hooks
- VirusTotal beta integration as a processor module
- MISP beta integration as a processor module
- Custom attributes on all case objects allowing to extend the default fields
- A compact timeline view for better visbility
- Premises of a dark theme
- Resiliency of docker volume in #80
- Minor improvements in #69, #79
- Bug fixes in #70, #73, #77
- Security fixes
v1.3.1 March 19, 2022
- Fixes wheel issue preventing proper build of the docker, as described in #83
v1.3.0 January 24, 2022
- Added the ability to batch upload IOC from a CSV file in #26
- Added the ability to batch upload assets from a CSV
- Screenshot - Export contents of any case pages as PNG in #35
- Export timeline as CSV in #47
- Improved timeline loading time by x10 - loads thousands of events in a sec
- New auto parsing of dates in events addition/updates
- Brand new timeline visualisations
- Improved assets loading time
- Shared links - easily share any case objects with your collaborators
- Right panel now offers last activities for user's current case
- Added assets tags in #37
- New API endpoints in #53
- Auto migration of database for next releases
- Indication of mandatory fields in forms
- General bug fixes, stability and UI improvement