4.1.0

Security

• Fixed two vulnerabilities. Further details will be provided in a security advisory.
• Patched several CVEs identified in third-party libraries.

Performance

• Fixed a freeze that could occur when a large number of analyzers were triggered simultaneously.

Bug Fixes

• Fixed a regression introduced in Cortex 4.0 that prevented Cortex from starting due to an argument issue in the entrypoint script.

• Fixed an issue with proxy configuration not being applied correctly.

• Fixed an issue where Docker containers were not removed after responder executions.

Analyzers & Responders

• Fixed special characters being rendered incorrectly in analyzer reports (e.g., EMLParser), caused by a Docker packaging issue.

• Fixed a UI error when editing the MS Entra ID analyzer configuration.

• Fixed a crash occurring when an analyzer input file was empty.

Improvements

• User actions in catalogs are now logged in the audit log.

4.0.0

This version introduces support for Elasticsearch 8 and includes multiple library dependency upgrades to address security vulnerabilities.

Important

Starting with this release, Cortex supports only Elasticsearch 8.x.
If you are currently using an earlier version of Elasticsearch, you must upgrade Elasticsearch and Cortex at the same time.

See the upgrade recommendations here.

Elasticsearch 8 compatibility

Cortex now supports Elasticsearch 8.x as its index engine.

Due to architectural constraints, Cortex cannot support multiple major versions of Elasticsearch simultaneously. Therefore, Elasticsearch 7.x and earlier versions are no longer supported.

Dependency upgrades

Several library dependencies have been updated to remediate known vulnerabilities and improve overall stability.

Minor bug fix

Fixed an issue related to the docker analyzer images existence check, performed when this analyzer is launched.

3.2.1

• [DL-2281] Update io.fabric8:kubernetes-client (6.13.5)
• [DL-2271] Update org.yaml:snakeyaml (2.2)

3.2.0

• [DL-1231] Add support of Kubernetes
• [DL-1380] Add API endpoint to set user API key
• [DL-1442] Remove openjdk dependency from deb/rpm packages
• [DL-1602] Add support of authentication on Docker registry
• [DL-1767] Update Docker image when the catalog is refreshed
• [DL-715 DL-716 DL-718] Update libraries
• [DL-717] Replace spotify docker client for java mainstream one
• [CTX-27] count jobs artifacts before finding to avoid ES scrolls

3.1.8

What's Changed

• [CTX-16] fix: don't use Elasticsearch scroll to find user by its API key by @To-om in #447
• [CTX-17] fix: Update version of JFFI by @To-om in #448
• Update deps by @vdebergue in #449
• update dependencies for rpm and debian packages by @vdebergue in #456
• GroupUserMapper.scala: Backport fix from TheHive for group mapper functionality by @jiprocha in #438
• Update cortex.service by @o101010 in #361
• Fixed user parameter name in application config sample by @Neuro-HSOC in #315

New Contributors

• @To-om made their first contribution in #447
• @vdebergue made their first contribution in #449
• @jiprocha made their first contribution in #438
• @o101010 made their first contribution in #361
• @Neuro-HSOC made their first contribution in #315

Full Changelog: 3.1.6...3.1.8

3.1.7

3.1.7 (2022-10-07)

Implemented enhancements:

• Prevent invalid analyzer when a new version is available #426
• Display job parameters in the report page #430
• An error in docker pull should not stop the analysis #431
• Improve catalog parsing #432

Closed issues:

• [BUG] CA Certs parameter can't be set back to null #377
• [FR] See user and organisation who triggered a responder in Cortex WebUI #394

3.1.3

3.1.3 (2021-11-10)

Fixed bugs:

• The build of frontend fails #389

3.1.2

3.1.2 (2021-11-05)

Closed issues:

• More settings on docker containers instantiated by Cortex #387

Implemented enhancements:

• Create a docker image with all dependencies #388

3.1.1

Implemented enhancements:

• [Improvement] Create logfile after installation #341

Fixed bugs:

• [BUG] Certificate not taken into account when running neurons with process #317
• [Bug] Update doesn't work on Elasticsearch 7.11 #346

3.1.0

Implemented enhancements:

• Improve Docker image #296
• Impossible to load catalog through a proxy #297
• Update login page design #303

Fixed bugs:

• [Bug] Cortex and boolean ConfigurationItems #309