Changelog

Synapse-VXIntel Changelog

Migrated existing API key settings to the new configuration manager. Per-user API keys were migrated to user-scoped configurations named synapse-vxintel:<useriden>. A legacy API key whose configuration cannot be added, for example because a global configuration already exists, is left in place and reported in the Cortex log; use vxintel.config.add to add it.
Removed cached vxintel.download responses, which may include API credentials.

Added support for proxy and SSL verification configurations on a per-vault basis.
Added new configuration manager commands:
- vxintel.config.add
- vxintel.config.del
- vxintel.config.list
- vxintel.config.show
- vxintel.config.update
- vxintel.config.migrate
Added a --config argument to vxintel.files.daily, vxintel.details, vxintel.avreport, and vxintel.download to override the default configuration.
Added the power-ups.vxintel.admin permission, which grants access to all Synapse-VXIntel commands and the vxintel.privsep module.
Added an Optic configuration workflow for synapse-vxintel vaults.
Removed the vxintel.setup.apikey command. Use vxintel.config.add / vxintel.config.update instead.

Fixed the data migrations failing when a view is deleted while they run, or when a view’s write layer is read-only. Views with a read-only write layer are now skipped with a warning.
Fixed privsep functions sending API credentials to URLs outside the VXIntel API, and made the generic request helper that took caller-chosen URLs private.
Fixed vxintel.download including the API key in the warning printed when a file download fails.

Migrated it:av:filehit nodes created by Synapse-VXIntel to it:av:scan:result nodes. The migrated it:av:filehit nodes are removed by this migration.

Removed usage of deprecated it:av:filehit form and replaced with it:av:scan:result.

Addition of vxintel.details command to download the details for specific hashes
Addition of vxintel.avreport command to download the AV scan results for a file