Intel 471#

# Release History

## EclecticIQ Intel471 Adversary and Malware Intelligence Extension

## 3.1.3 , 3.2.1, 2.14.3 (7 December 2023)

**Added:**

- Support IPv4  and IPv6 cidr address

## 3.1.1, 3.0.1, 2.14.1, 2.13.1, 2.12.1 (19 July 2023)

**Changed:**

- Aggregate indicators per report, to generate fewer packages to benefit ingestion performance.

## 2.10.6, 2.11.4, 2.12.0(12 May 2022)

**Fixed:**

- Issue where Intel 471 Watcher Alerts incoming feed would fail because of an unexpected 'topic' field.


## 2.10.5, 2.11.3, 2.12.0 (6 April 2022)

**Changed:**

- Now supports ingesting ssdeep hashes.


## 2.11.2, 2.10.4 (23 December 2021)

**Changed**

- Ingested actor and report entities were producing
three observable types: 'name', 'handle', and 'actor-id'.
Now, these are processed to only produce 'name' observables.
- Now uses the more efficient Intel471 Indicator stream API.

## EclecticIQ Extension Commons
## 2.10.3 (1 December 2021)

**Changed:**

- Add 'tcp' to allowed protocol identifiers for uri and domain observables.

## EclecticIQ Intel471 Adversary and Malware Intelligence Extension
## 2.10.3 (1 December 2021)

**Requires EclecticIQ Extension Commons 2.10.3^**

**Changed:**

- Incoming feed now does not set a maliciousness value for port observables.

**Fixed:**

- Issue where users would not be able to download
data from the Malware Intelligence Reports feed
dated earlier than a seemingly arbitrary timestamp.

## EclecticIQ Intel471 Adversary and Malware Intelligence Extension
## 2.9.3 (1 December 2021)

**Changed:**

- Incoming feed now does not set a maliciousness value for port observables.

**Fixed:**

- Issue where users would not be able to download
data from the Malware Intelligence Reports feed
dated earlier than a seemingly arbitrary timestamp.


**Release versions: 2.9.2, 2.10.0**

- Name: EclecticIQ Intel471 Adversary and Malware Intelligence Extension

- Release date: 30 June, 2021

        Fixed:

        * Adds support for geolocation and ISP data in IPv4 indicators.

**Release versions: 2.10.1**

- Release date: 27 August 2021

> **Requires EclecticIQ Extenesion Commons 2.10.2**

        Fixed:

        - Improved observable URI validation.
        - Ingested observables are now checked for empty dictionaries.


**Release versions: 2.8.1, 2.9.1, 2.10.0**

- Name: EclecticIQ Intel471 Adversary and Malware Intelligence Extension

- Release date: 15 June, 2020

**Fixed**:

- Issue where Malware Intelligence feed would fail because of unexpected data in IPv4 indicators.


## Initial release

Release date: December, 2016

**Features:**

* Now provides the Intel 471 Vulnerability Intelligence incoming feed.
* Now provides the Intel 471 Watcher Alerts incoming feed.
* Now provides the Intel 471 Adversary Intelligence Feed incoming feed.
* Now provides the Intel 471 Malware Intelligence Reports Feed incoming feed.
* Now provides the Intel 471 Posts Enricher.
* Now provides the Intel 471 Adversary Intelligence Enricher.