Changelog

Synapse-HybridAnalysis Changelog

NEXTVERS - 2026-XX-YY

Automatic Migrations

  • Migrated storage version tracking to use Storm package inits.

  • Migrated existing API key and tag prefix settings to the new configuration manager. Per-user API keys were migrated to user-scoped configurations named synapse-hybridanalysis:<useriden>. A legacy API key whose configuration cannot be added, for example because a global configuration already exists, is left in place and reported in the Cortex log; use hybridanalysis.config.add to add it. When the global API key is left in place, so is the tag prefix. An invalid tag prefix is reported in the Cortex log and not migrated.

Features and Enhancements

  • Updated Power-Up to use $lib.auth.users.get() instead of $lib.user.

  • Added support for proxy and SSL verification configurations on a per-vault basis.

  • Added new configuration manager commands:

    • hybridanalysis.config.add

    • hybridanalysis.config.del

    • hybridanalysis.config.list

    • hybridanalysis.config.show

    • hybridanalysis.config.update

    • hybridanalysis.config.migrate

  • Added a --config argument to hybridanalysis.reportsummary, hybridanalysis.overview, and hybridanalysis.samples to override the default configuration.

  • Added the power-ups.hybridanalysis.admin permission, which grants access to all Synapse-HybridAnalysis commands and the hybridanalysis.privsep module.

  • Added an Optic configuration workflow for synapse-hybridanalysis vaults.

  • Removed the hybridanalysis.setup.apikey and hybridanalysis.setup.tagprefix commands. Use hybridanalysis.config.add / hybridanalysis.config.update instead.

Bugfixes

  • Fixed the data migrations failing when a view is deleted while they run, or when a view’s write layer is read-only. Views with a read-only write layer are now skipped with a warning.

v3.0.0 - 2025-08-22

Automatic Migrations

  • Removed all data cached by the Power-Up.

Features and Enhancements

  • Removed hybridanalysis.byhash command since the POST /search/hash API is no longer supported. The hybridanalysis.reportsummary command provides equivalent functionality.

  • Removed caching and the --asof option from the following commands: hybridanalysis.overview, hybridanalysis.reportsummary, hybridanalysis.samples.

  • Updated base URL to use hybrid-analysis.com instead of www.hybrid-analysis.com.

v2.2.1 - 2025-05-16

Bugfixes

  • Fixed an issue where attempting to migrate an it:exec:proc without :time could cause an exception.

  • Fixed an issue where the automatic migration from v2.2.0 would re-run (without modification) if the Power-Up was reinstalled even if it had successfully completed previously.

v2.2.0 - 2025-01-28

Automatic Migrations

  • Migrated all it:av:sig, it:av:prochit, and it:av:filehit nodes created by Synapse-HybridAnalysis to it:av:scan:result nodes. The migrated it:av:sig, it:av:prochit, and it:av:filehit nodes are removed by this migration.

Features and Enhancements

  • Deprecated hybridanalysis.migrationAvHit() on-demand migration function.

v2.1.0 - 2024-04-22

Features and Enhancements

  • Add file:filepath nodes for each file name reported back from the response to the hybridanalysis.overview command.

v2.0.0 - 2024-02-20

Features and Enhancements

  • Update deprecated $lib.dict() usage to JSON style syntax.

  • Update Power-Up to remove deprecated it:av:* forms and replace with it:av:scan:result.

  • Add an on-demand migration for it:av:filehit and it:av:prochit nodes. See the Admin Guide for additional details.

v1.6.0 - 2023-03-22

Features and Enhancements

  • Update Power-Up to build with code signing.

Bugfixes

  • Fix an issue where certain files would raise BadTypeValu exceptions.

v1.5.1 - 2022-06-20

Bugfixes

  • Fix an issue where API responses for unavailable file hashes could raise an error rather than displaying a warning and continuing.

  • When adding it:mitre:attack:technique nodes set the :name property if it was not previously set, rather than the :desc property.

v1.5.0 - 2022-05-11

Features and Enhancements

  • Add hybridanalysis.samples command to download Hybrid Analysis sample files by SHA-256.

  • Cached API responses are now stored in the JsonStor instead of in nodedata

  • Update sandbox data ingestion to prefer the :sandbox:file property over :exe where appropriate.

v1.4.0 - 2022-01-27

Features and Enhancements

  • Update it:host creation to use the :desc property to record host description rather than the deprecated :model property.

v1.3.0 - 2022-01-03

Features and Enhancements

  • Update hybridanalysis.reportsummary to add inet:urlfile nodes for results where submission data contains urls.

Bugfixes

  • Fix an issue where the hybridanalysis.reportsummary could fail due to incomplete information about extracted files.

v1.2.0 - 2021-10-04

Features and Enhancements

  • Add hybridanalysis.reportsummary command to query the Hybrid Analysis report summary endpoint.

v1.1.0 - 2021-09-15

Features and Enhancements

  • Add hybridanalysis.overview command to query the Hybrid Analysis overview endpoint.

v1.0.0 - 2021-08-13

Features and Enhancements

  • Initial release of Synapse-HybridAnalysis v1.0.0.