Release Notes for v1.8.0

Date: 8th of June, 2023

Added:

• A new single source of truth reputation lookup for Hashes, URLs, IPs, and Domains. Automatically integrated with MDCloud look up. Always yielding a result, independent of whether a report was generated for the search query.

• Threat Intelligence Similarity Search feature for Portable Executable (PE) files

• Emulation metadata parsing from self-extracting archive files
• Detection of appended files in images with steganography
• Administrative feature to overrule scan report verdict
• Detection of file executions initiated by msiexec on remotely fetched MSI files

Changed:

• Extended certificate whitelisting with QT Framework signatures
• Extended Filescan Reputation API with support for IPs, domains and URLs
• Extended Filescan Fuzzy Hash blacklist hits with additional details
• Optimized JPG processing speed
• Fine -tuned YARA rule behaviours
• Fine-tuned fuzzy hash lookup verdict contribution
• Improved RTF emulation success rate
• Enhanced startup time with lighting fast speed and performance
• Improved verdict calculation

Fixed:

• Service stability issues
• Service availability issues via automated restart mechanism
• Backend disk usage issues
• Backend service error handling issues
• Phishing URL detection issues
• OSINT provider verdict standardisation issues