Changelog

Synapse-PolySwarm Changelog

v2.0.0 - 2026-11-10

Automatic Migrations

  • Migrated storage version tracking to use Storm package inits.

  • Migrated existing API key and tag prefix settings to the new configuration manager. Per-user API keys were migrated to user-scoped configurations named synapse-polyswarm:<useriden>. A legacy API key whose configuration cannot be added, for example because a global configuration already exists, is left in place and reported in the Cortex log; use polyswarm.config.add to add it. When the global API key is left in place, so is the tag prefix. An invalid tag prefix is reported in the Cortex log and not migrated.

Features and Enhancements

  • Updated Power-Up to use $lib.auth.users.get() instead of $lib.user.

  • Added support for proxy and SSL verification configurations on a per-vault basis.

  • Added new configuration manager commands:

    • polyswarm.config.add

    • polyswarm.config.del

    • polyswarm.config.list

    • polyswarm.config.show

    • polyswarm.config.update

    • polyswarm.config.migrate

  • Added a --config argument to polyswarm.metadata.search, polyswarm.family.list, polyswarm.search.mapping, and polyswarm.iocs.byhash to override the default configuration.

  • Added the power-ups.polyswarm.admin permission, which grants access to all Synapse-PolySwarm commands and the polyswarm.privsep module.

  • Replaced the Optic configuration workflow with one for synapse-polyswarm vaults.

  • Removed the polyswarm.setup.apikey and polyswarm.setup.tagprefix commands. Use polyswarm.config.add / polyswarm.config.update instead.

Bugfixes

  • Fixed the data migrations failing when a view is deleted while they run, or when a view’s write layer is read-only. Views with a read-only write layer are now skipped with a warning.

  • Fixed the polyswarm.privsep module exposing its generic request helper, which took caller-chosen API paths, and made it private.

v1.3.0 - 2025-05-20

Features and Enhancements

  • Updated polyswarm.metadata.search to populate the it:exec:query:synuser property.

v1.2.0 - 2025-01-27

Automatic Migrations

  • Migrated all it:av:filehit nodes created by Synapse-PolySwarm to it:av:scan:result nodes. The migrated it:av:filehit nodes are removed by this migration.

Features and Enhancements

  • Deprecated polyswarm.migrationAvHit() on-demand migration function.

v1.1.0 - 2025-01-17

Features and Enhancements

  • Updated deprecated $lib.list() usage to JSON style syntax.

v1.0.0 - 2024-04-22

Features and Enhancements

  • Update Power-Up to remove deprecated it:av:* forms and replace with it:av:scan:result.

  • Add an on-demand migration for it:av:filehit nodes. See the Admin Guide for additional details.

v0.3.3 - 2024-02-20

Features and Enhancements

  • Update deprecated $lib.dict() usage to JSON style syntax.

v0.3.2 - 2023-12-08

Bugfixes

  • Fix an issue where invalid IP values were raising an error during ingest in the polyswarm.iocs.byhash command.

v0.3.1 - 2023-11-28

Bugfixes

  • Fix an issue with the polyswarm.family.list command where a malware family with no name was not handled correctly.

v0.3.0 - 2023-11-27

Features and Enhancements

  • Add polyswarm.iocs.byhash command to retrieve IOCs related to a file hash.

v0.2.0 - 2023-03-22

Features and Enhancements

  • Update Power-Up to build with code signing.

v0.1.1 - 2022-10-11

NOTE: This release is considered Beta and may be subject to change.

Bugfixes

  • Fix an issue with handling extracted C2 IP results which potentially contain URLs instead.

v0.1.0 - 2022-09-30

NOTE: This release is considered Beta and may be subject to change.

Features and Enhancements

  • Add polyswarm.family.list command.

  • Add polyswarm.search.mapping command.

  • Add risk:tool:software nodes for PolyUnite families.

  • Add _polyswarm:polyscore extended property to file:bytes nodes.

  • Ingest additional network IOC data from search results.

v0.0.1 - 2022-08-18

NOTE: This release is considered Beta and may be subject to change.

Features and Enhancements

  • Implement polyswarm.metadata.search command.

  • Initial BETA release of the Synapse-PolySwarm Power-Up