MISP | Version 2#

MISP version 2 for EclecticIQ Intelligence Center (EIQ IC) offers:

Limitations#

  • Running any MISP v1 Incoming feeds at the same time as MISP v2 Incoming feed is discouraged as it might lead to data corruption.

  • To migrate from MISP v1 to MISP v2, create a new feed instead of changing the Transport type and Content type on the existing feed.

Release notes#

# Release History


# 3.6.6, 3.7.5, 3.8.1
Release date: 13 Aug 2025

**Changed:**

* Added an option to include report attachments from MISP Event Reports and External analysis attributes.
* Added a request timeout to prevent the feed from getting stuck in a running state.


# 3.7.4
Release date: 08 Jul 2026

**Added:**

* Now provides support for warning list in Attributes.

# 3.6.5, 3.7.3
Release date: 20 May 2026

**Changed:**

* Changed the creation of report id for better ingestion.

# 3.7.2

Release date: 08 Apr 2026

**Fixes:**

* Observables are coming together with entities.

# 3.6.4, 3.7.1
Release date: 01 Apr 2026

**Feature:**

* Add support to push ip-src and ip-dst through tags.

# 3.6.3
Release date: 26 February 2026

**Changed:**

* Add support for custom polling window(end date).

# 3.6.2
Release date: 29 December 2025

**Changed:**

* Replaced pkg_resources with native importlib for package management.


# 3.5.4, 3.6.1

Release date: 20 Nov 2025

**Fixes:**

- Now we are providing External Analysis attributes as one normalized report.
- Problem with manual upload with EIQ MISP outgoing feed packages and MISP json files.

# 3.4.3, 3.5.3

Release date: 16 Sept 2025

**Fixes:**

- Now we are handling the big size objects better.

# 3.4.2, 3.5.2

Release date: 02 Jun 2025

**Fixes:**

- Now we set event published timestamp to be the new date for download.

# 3.4.1, 3.5.1

Release date: 10 Apr 2025

**Fixes:**

- Fixes problems with the tags and attributes.

**Features:**

* Initial release of improved misp version with bi-directional.