Changelog

Synapse-ReversingLabs Changelog

NEXTVERS - 2026-XX-YY

Automatic Migrations

  • Migrated existing API key, endpoint, proxy and tag prefix settings to the new configuration manager. Per-user API keys and endpoints were migrated to user-scoped configurations named synapse-reversinglabs:<useriden>; a user with only an API key uses the global endpoint. A legacy API key and endpoint whose configuration cannot be added, for example because a global configuration already exists, or that has a missing or invalid endpoint or a missing API key, are left in place and reported in the Cortex log; use reversinglabs.config.add to add them. When the global API key and endpoint are left in place, so are the tag prefix and proxy settings. A user with only an endpoint gets no configuration, keeps the endpoint setting, and uses the global configuration until an admin adds one for them. An invalid tag prefix is reported in the Cortex log and not migrated.

Features and Enhancements

  • Added support for base URL, tag prefix, proxy and SSL verification configurations on a per-vault basis.

  • Added new configuration manager commands:

    • reversinglabs.config.add

    • reversinglabs.config.del

    • reversinglabs.config.list

    • reversinglabs.config.show

    • reversinglabs.config.update

    • reversinglabs.config.migrate

  • Added a --config argument to reversinglabs.a1000.download, reversinglabs.a1000.enrich, and reversinglabs.a1000.submit to override the default configuration.

  • Updated the power-ups.reversinglabs.admin permission to grant access to all Synapse-ReversingLabs commands and the reversinglabs.privsep module.

  • Updated background file fetching to use the configuration selected when the file was queued.

  • Updated sample downloads to use the configured proxy.

  • Added an Optic configuration workflow for synapse-reversinglabs vaults.

  • Removed the reversinglabs.setup.apikey, reversinglabs.setup.endpoint, reversinglabs.setup.proxy and reversinglabs.setup.tagprefix commands and the reversinglabs.admin module. Use reversinglabs.config.add / reversinglabs.config.update instead.

Bugfixes

  • Fixed the data migrations failing when a view is deleted while they run, or when a view’s write layer is read-only. Views with a read-only write layer are now skipped with a warning.

  • Fixed the reversinglabs.a1000.submit request error warning not including the HTTP code.

v2.0.0 - 2026-05-11

Automatic Migrations

  • Migrated dmon iden tracking from global variables.

  • Removed duplicate dmons that may have been created.

  • Migrated migration execution from onload to inits.

v1.1.1 - 2025-12-12

Bugfixes

  • Fixed a bug where the wrong data field was being parsed resulting in the inet:flow:dst:ipv4 property not being populated.

v1.1.0 - 2025-07-29

Automatic Migrations

  • Migrate endpoint configurations to include SSL verification options (set to true by default).

Features and Enhancements

  • Updated the reversinglabs.setup.endpoint command with a --ssl-noverify option which can be used to disable SSL verification on custom endpoints. To update an existing endpoint to ignore SSL, run the command with the --ssl-noverify option. Example: reversinglabs.setup.endpoint https://mya1000.mydomain --ssl-noverify.

v1.0.1 - 2025-06-25

Bugfixes

  • Improved error messaging when $lib.axon.wget() fails by returning the HTTP response code and reason.

v1.0.0 - 2025-01-17

Automatic Migrations

  • Migrate all it:av:sig and it:av:filehit nodes created by Synapse-ReversingLabs to it:av:scan:result nodes. The migrated it:av:sig and it:av:filehit nodes are removed by this migration.

Features and Enhancements

  • Removed usage of deprecated it:av:* forms and replaced with it:av:scan:result.

  • Updated deprecated $lib.list() usage to JSON style syntax.

v0.6.0 - 2024-05-15

Features and Enhancements

  • Update $lib.bytes usage with $lib.axon APIs.

v0.5.0 - 2024-02-20

Features and Enhancements

  • Update modelling of archive files to use file:archive:entry nodes when using Synapse-Fileparser>=4.17.0. Otherwise file:subfile nodes will continue to be used.

  • Update deprecated $lib.dict() usage to JSON style syntax.

v0.4.0 - 2023-06-16

Features and Enhancements

  • Mark the Synapse-FileParser dependency as optional.

v0.3.0 - 2023-03-22

Features and Enhancements

  • Update Power-Up to build with code signing.

  • Add dependency requirements to package definition.

Bugfixes

  • Check for invalid nodes and missing files earlier in the file submission process.

v0.2.0 - 2022-06-20

Features and Enhancements

  • Clarified the error message on files not being found in the configured axon.

  • Add a --scanners parameter to reversinglabs.a1000.submit to better clarify submission to the AV scanners ReversingLabs offers.

  • Add reversinglabs.setup.proxy command to configure the Synapse-ReversingLabs specific proxy settings.

  • Added power-ups.reversinglabs.admin to gate Synapse-ReversingLabs specific admin-only permissions.

Bugfixes

  • Documented additional permissions needed for operational usage.

  • it:prod:soft:name secondary properties are now set to the engine name and not the result.

v0.1.0 - 2022-05-11

Features and Enhancements

  • Cached API responses are now stored in the JsonStor instead of in nodedata.

v0.0.1 - 2022-05-11

Features and Enhancements

  • Initial (beta) release of the Synapse-ReversingLabs Power-Up