v1.2

Security fixes after an application pentest within the scope of Common Criteria EAL 2 Evaluation.

Severity	ID	Description
Medium	ID 001	Log Injection
Medium	ID 002	Compartment rules port bypass
Medium	ID 003	Sensitive Data Exposure Through Application Logs
Low	ID 005	Blocked Distribution Levels Filter Bypass
Informational	ID 004	Filter Bypass Using Different Letter Case
Informational	ID 006	Allowlist filter bypass
Informational	ID 007	Insecure installation instructions

v1.1

What's Changed

• add: extend coverage, fix analyst data inspection by @righel in #17
• add more logging
• change logging defaults
• live-reload config if config file was changed, log config settings on load

Full Changelog: v1.0...v1.1

v1.0

What's Changed

• add support for analyst data by @righel in #10
• add support for X-UserOrgUUID header check for sharing groups by @righel in #12
• check event report distribution level by @righel in #14
• fix: raise 'empty message body exception' for get_event_from_message … by @Wachizungu in #15
• chg: remove from the configuration as this information can be derive… by @righel in #16

New Contributors

• @Wachizungu made their first contribution in #15

Full Changelog: v0.6...v1.0

v0.6

What's Changed

• Add Whitelisting Features to allow some external conntections by @sva-mk in #4
• Allow galaxy clusters sync by @righel in #5
• fix: change namings to make it generic by @righel in #6
• fix: allow sightings sync by @righel in #7

New Contributors

• @sva-mk made their first contribution in #4

Full Changelog: v0.5...v0.6

misp-guard 0.5 released first tag

Changelog

v0.5 (2022-12-22)

Other

• Add logs folder. [Luciano Righetti]

• Add logs folder. [Luciano Righetti]

• Add missing dep. [Luciano Righetti]

• Remove yaml dep. [Luciano Righetti]

• Add missing dep. [Luciano Righetti]

• Merge pull request #3 from righel/python-logging. [Luciano Righetti]

  use python logging, add logging file config

• Use python logging, add logging file config. [Luciano Righetti]

• Merge pull request #2 from righel/jsonschema-conf. [Luciano Righetti]

  add jsonschema validation on config file

• Add jsonschema validation on config file. [Luciano Righetti]

• Merge pull request #1 from righel/rework-handle-compartments. [Luciano Righetti]

  Rework handle compartments

• Remove global block rules to have per instance rules, update readme and test cases. [Luciano Righetti]

• Add more tests. [Luciano Righetti]

• Add test instructions to readme. [Luciano Righetti]

• Add per instance required taxonomies, allowed tags and blocked tags. rework tests. [Luciano Righetti]

• Add license. [Luciano Righetti]

• Initial commit. [Luciano Righetti]

• Update README.md. [Luciano Righetti]

• Initial commit. [Luciano Righetti]