Changelog

Synapse-VMRay Changelog

v1.6.0 - 2022-07-13

Features and Enhancements

  • Automatically fetch any malware configuration data as part of vmray.sample.iocs.

  • Add ability to query VMRay for IOCs related to a given inet:url or inet:fqdn.

  • VMRay Threat Identifiers are now modelled as meta:rule nodes with matches light edges to the input node.

  • Nodes with associated VMRay Threat Identifiers are now tagged with rep.vmray.vtis.<ID>, where ID is the ID of the VMRay Threat Identifier

Bugfixes

  • Fix an issue in GUID generation for inet:flow IOCs.

v1.5.0 - 2022-06-20

Features and Enhancements

  • Add vmray.sample.submit to submit samples to VMRay for analysis.

v1.4.0 - 2022-05-11

Features and Enhancements

  • Cached API responses are now stored in the JsonStor instead of in nodedata.

  • Update sandbox data ingestion to prefer the :sandbox:file property over :exe where appropriate.

v1.3.0 - 2022-01-27

Features and Enhancements

  • Update it:host creation to use the :desc property to record host description rather than the deprecated :model property.

v1.2.1 - 2022-01-10

Bugfixes

  • Fix an issue where it:host nodes were being re-used when ingesting data. This only applies to new data being added (or re-added).

  • Clarify a warning message related to VMRay not containing analysis results.

v1.2.0 - 2021-12-16

Features and Enhancements

  • Improve modeling of domain IOCs by modeling the protocol information (for DNS and HTTP/HTTPS requests).

  • Update modeling of domain information as inet:dns:a/inet:dns:aaaa nodes instead of inet:url nodes.

  • Model files marked as “Embedded File” as file:subfile nodes.

v1.1.0 - 2021-10-13

Features and Enhancements

  • Add -(refs)> light edges that go from the file:bytes of a report to the associated IOCs.

Bugfixes

  • Initialize meta:source node before potentially adding -(seen)> light edges.

v1.0.1 - 2021-10-06

Bugfixes

  • Add description to storm package

  • Fix issue in vmray.sample.iocs related to invalid query parameters

v1.0.0 - 2021-10-04

Features and Enhancements

  • Initial release of the Synapse-VMRay Power-Up