Version 2.3.0
Date: July 30, 2024
- API client:
- Add cve command to query the CVE lookup API
- CLI:
- Add cve command to display result from CVE lookup API
- Dependencies:
- Updated cachetools to version 5.4.0
Version 2.2.0
Date: June 11, 2024
- API client:
- Update analyze command to use analysis endpoint
- Add persona_details command to pull a sensor persona's details based on ID
- Add sensor_list command to pull list of sensors from a users workspace, based on API key used
- Add sensor_activity command to pull sensor activity feed from users workspace
- Add sensor_activity_ips command to pull list of source ips from sensor activity feed
- CLI:
- Update analyze output to match that of new endpoint response
- Add persona-details command to display command response
- Add sensor-list command to display command response
- Add sensor-activity command to display command response
- Dependencies:
- Updated Clic to version 8.1.7
- Updated ansimarkup to version 2.1.0
- Updated click-repl to version 0.3.0
- Updated dict2xml to version 1.7.5
- Updated jinja2 to version 3.1.4
- Updated more-itertools to version 10.3.0 (for py3.8 and above only)
- Updated requests to version 2.32.3
Version 2.1.0
Date: February 07, 2024
- API client:
- None
- CLI:
- Fixed stats command display to show correct countries
- Fixed similar command to handle non-noise IP response
- Dependencies:
- Updated requests to version 2.31.0
- Updated cachetools to version 5.3.1
- Removed ipaddress as a required package
Version 2.0.1
Date: April 14, 2023
- API client:
- Updated timeline commands to support 90 day lookback period
- CLI:
- Updated timeline commands to support 90 day lookback period
- Dependencies:
- Updated ansimarkup to version 1.5.0
- Updated dict2xml to version 1.7.3
- Updated itertools to version 9.1.0
- Updated requests to version 2.28.2
Version 2.0.0
Date: February 15, 2023
- BREAKING CHANGE:
- Removed support for python 3.5
- API client:
- Added similar command to support IP Similarity lookups
- Added timeline command to support IP Time Series Single Attribute lookups
- Added timelinehourly command to support IP Time Series Hourly Summary lookups
- Added timelinedaily command to support IP Time Series Daily Summary lookups
- Added exclude_raw parameter to query command to reduce issues with default behavior in integrations
- CLI:
- Added similar command to support IP Similarity lookups
- Added timeline command to support IP Time Series Single Attribute lookups
- Added timelinehourly command to support IP Time Series Hourly Summary lookups
- Added timelinedaily command to support IP Time Series Hourly Summary lookups
- Dependencies:
- Updated dict2xml to version 1.7.2
- Updated colorama to version 0.4.6
- Updated cachetools to version 5.3.0
Version 1.3.0
Date: September 07, 2022
- API client:
- Rework logging to remove structlog predefined logging to follow best practices
- Update the quick command to use a POST API request instead of a GET API request
- Fix bug with ip_multi preventing lists of more than 1000 entries from returning correct data
- Fix bug with ip_multi when cache is disabled not returning correct values
- Fix bug with ip_multi where include_invalid parameter was not working
- CLI:
- None
- Dependencies:
- Updated Click to 8.1.3
- Updated colorama to 0.4.5
- Updated jinja2 to 3.1.2
- Updated more-itertools to 8.14.0
- Update requests to 2.28.1
- Removed structlog
Version 1.2.1
Date: June 03, 2022
- API client:
- None
- CLI:
- Add missing HASSH values to output for IP and QUERY commands
- Remove unused PCAP command
- Dependencies:
- Update jinja to 3.1.0
- Update dict2xml to 1.7.1
- Update Click to 8.1.2
- Update more-itertools to 8.13.0
- Update cachetools to 5.2.0
Version 1.2.0
Date: September 03, 2021
- API client:
- Add ip_multi command to support bulk IP Context lookups
- Fix issue with "include_invalid" option on quick command failing with "riot" key missing
- CLI:
- Add ip-multi command to support bulk IP Context lookups
- Add support for comma separated IP lists for ip-multi and quick commands
- Add size and scroll arguments for query and stats command
- Update quick command to not error completely when non-routable IP is passed as an input in a list
- Dependencies:
- Added colorama dependency
- Update Click to 8.0.3
- Updated cachetools to 5.0.0
- Updated jinja to 3.0.3
- Updated more-itertools to 8.12.0
- Updated requests to 2.27.1
- Updated structlog to 21.5.0
Version 1.1.0
Date: June 23, 2021
- API client:
- Update filter command to use new quick endpoint with noise/riot updates
- Update analyze command to use new quick endpoint with noise/riot updates
- CLI:
- Update quick command to handle quick endpoint noise/riot updates
- Add support for RIOT trust_level output
- Dependencies:
- Updated Click to 8.0.1
Version 1.0.0
Date: June 02, 2021
* Removed Support for Python2 - BREAKING CHANGE *
- API client:
- Fixed error handling for both error and message responses
- Implemented ipaddress package for IP validation to prevent non-routable IP addresses from being sent for query to the API
- CLI:
- Updated warning messages to help identify invalid vs non-routable IPs
- Dependencies:
- Updated cachetools to 4.2.2
- Updated six to 1.16.0
- Updated jinja2 to 3.0.1 for py36 and py37
- Updated click-repl to 0.2.0
- Updated more-itertools to 8.8.0
Version 0.9.1
Date: May 05, 2021
- CLI:
- #465: Fixed error handling on expired API key
- Dependencies:
- Updated cachetools to 4.2.2
Version 0.9.0
Date: April 21, 2021
- API client:
- Removed rouge debug statement from analysis command
- CLI:
- Fixed query command to display text output for queries with more than 10k results * Query now limits results to 10 on the text output
Version 0.8.0
Date: March 26, 2021
- API client:
- Added support for Community API
- Added information about "integration_name" parameter to docs
- BREAKING CHANGE Updated test_connection() to use /ping endpoint and return API response message and exception instead of string values
- CLI:
- Added support for Community API
- Updated Analyze command to include RIOT
- Changed default behavior to no longer use query. Invalid commands return error now
- Dependencies:
- Updated cachetools to 4.2.1
- Updated jinja2 to 2.11.3
- Updated more-itertools to 8.7.0
- Update structlog to 21.1.0
Version 0.7.0
Date: January 07, 2021
- API client:
- Add "include_invalid" option to QUICK lookup to return invalid IPs as part of the JSON response
- Added support for new /riot endpoint
- Updated logic in quick to better handle non-list format input ('ip_1,ip_2')instead of ['ip_1','ip_2']
- Added ability to configure CACHE TTL and CACHE MAX SIZE instead of only using hardcoded defaults
- CLI:
- Added support for new riot command
- Updated json_formatter for query commands to return data only as New Line Delimited JSON
- Dependencies:
- Updated sphinx to 3.4.0
- Updated structlog to 20.2.0 for python 3.6 and 3.7
Version 0.6.0
Date: December 21, 2020
- API client:
- Added
test_connection
method to allow for integrations to validate connection and API key
- Added
- CLI:
- Added spoofable and CVE outputs where possible
- Both API client and CLI:
- Fix IP_Validation method bug which was preventing valid IPs from being submitted
Version 0.5.0
Date: December 16, 2020
- API client:
- add
metadata
method. - replace dicttoxml with dict2xml for license-compatibility.
- add
- Both API client and CLI:
- Update dependencies to the latest version
- Add support for PROXY usage
- Update the IP validator to ensure better validation
Version 0.4.1
Date: January 3, 2020
- API client:
- add
spoofable
field.
- add
Version 0.4.0
Date: November 18, 2019
- API client:
- add
interesting
method. - add
filter
method. - add
analyze
method. - add
scroll
andsize
parameters toquery
method. - add
api_server
andintegration_name
parameters to__init__
method.
- add
- CLI:
- add
interesting
subcommand. - add
filter
subcommand. - add
analyze
subcommand. - add
api_server
option to setup subcommand.
- add
- Both API client and CLI: * use structlog logging library.
Version 0.3.0
Date: September 06, 2019
- API client:
- rename API client methods to match CLI command names.
- use LRU cache for IP context and quick check calls.
- CLI:
- add help, repl and version subcommands.
- global options moved to those subcommands where they apply.
- make request timeout configurable.
Version 0.2.2
Date: August 28, 2019
- CLI:
- fix
setup
subcommand when configuration directory doesn't exist.
- fix
Version 0.2.1
Date: August 28, 2019
- API client
- Version sent in
User-Agent
header. - Raise
RateLimitError
on 429 response.
- Version sent in
- CLI
- Colored output.
- Add
-i / --input
option.
Version 0.2.0
Date: August 21, 2019
- Complete codebase refactoring.