4.1.4

Implemented enhancements:

• [Feature Request] Sort case templates in alert Import drop down menu #1956
• [Enhancement] Make alert deletion more robust #1967

Fixed bugs:

• [Bug] Alert counter refresh not working #1911
• [Bug] Enabled or Disabled Taxonomies doesn't work #1957
• [Bug] TheHive 4.1.3-1 Task in Case is not visible #1964
• [Bug] Aggregation on custom fields provides incorect result (again) #1965
• [Bug] TheHive startup times out if schema evolution is long #1966
• [Bug] Default analyst rol cant add TTPs #1968
• [Bug] Links section should not be empty in Observables details view #1972
• [Bug] Deleting a shared rule case for org2 - deleting observables (sharing to org2) from the org1. #1973
• [Bug] AddTagToArtifact operation not working in 4.1.3 #1974

4.1.3

Implemented enhancements:

• [Improvement] Cleanup deprecated filter usage #1922
• [Improvement] Make the property "Imported" in alerts optimised for index #1923
• [Feature Request] Display case templates in alphabetic order in "New case" menu #1925
• [Enhancement] Prevent the application to start if database initialisation fails #1935
• [Enhancement] Improve performance #1946
• [Enhancement] Remove blocking queries in some UI pages #1948
• [Enhancement] Use polluingDuration config from the UI #1951
• [Enhancement] Disable confirm buttons in import dialogs #1953
• [Enhancement] Add environment file in service #1954

Fixed bugs:

• [Bug] Add "Not assigned" to Assignee field on task page for tasks without an assigned user #1508
• [Bug] (Still) slow loading of list-tags endpoint with 4.1.2 #1914
• [Bug] Aggregation on custom fields provides incorect result #1921
• [Bug] Very slow load of Case Task list in UI in 4.1.2 #1927
• [Bug] Task "Take" Button not working #1931
• [Bug] Cluster: new nodes fail to start when the oldest node has been restarted #1934
• [Bug] Index status page is very slow #1936
• [Bug] Update of color in tags #1950

4.1.2

Implemented enhancements:

• [Feature Request] Add case search by TTP #1893

Fixed bugs:

• [Bug] Slow loading of TheHive because of Tags #1869
• [Bug] After migration from 4.0.5 to 4.1.0 old tasklogs are not returned by "/api/v1/query?name=case-task-logs" query #1875
• Dashboards - custom fields #1877
• [Bug] TH 4.1.1 : Filter by "IMPORTED" does not work for alerts imported into existing cases #1891
• [Bug] Fix the S3 configuration options #1892
• [Bug] All attachments in task logs disappeared following upgrade to 4.1.1 #1894
• [Bug] Continued performance issues after upgrade to 4.1.1 #1896
• [Bug] Fix issues dashboard list #1901
• [Bug] Migration tool migrates unsupported elastic index #1907
• [Bug] Folder permissions are not correctly set in docker image #1908

4.1.1

Implemented enhancements:

• [Feature Request] Include organisation ID in webhooks #1865

Closed issues:

• [Bug] Importing the ATT&CK library fails on 4.1 #1862
• Thehive4.1.0 Issues with Lucene #1863

Fixed bugs:

• [Bug] TheHive doesn't start if webhook is configured without authentication #1859
• [Bug] Migration fails from 4.0.5 to 4.1 #1861
• [Bug] Filter by "IMPORTED" does not work #1866
• [Bug] TheHive doesn't start in cluster mode (serializer is missing) #1868
• [Bug] Full-text search is slow #1870

4.1.0

4.1.0 (2021-03-18)

Implemented enhancements:

• Suggestion: Marge cases on the oldest and close the newest as duplicated #960
• [Feature Request] Implement case merging feature #1264
• [Enhancement] Enrich v1 API #1454
• [Feature Request] Prompt to save changes to Case Templates before navigating away #1524
• [Feature Request] allow user to choose the format of the date displayed #1583
• [Feature Request] Add support to taxonomies #1670
• [Enhancement] Improve search performance by using external index engine #1731
• [Feature Request] Default filter of alert case similarity : add "No filter" as an option #1750
• [Feature Request] Add MITRE ATT&CK support #1766
• [Feature Request] Show case status in the default view (open / closed as FP / closed as TP, etc.) #1781
• [Enhancement] Create logfile after installation #1789
• [Feature Request] Revamp case template admin section #1804
• [Feature Request] Improve date fields in data lists #1807
• [Feature Request] Enhance organisation list page #1813
• [Feature Request] Add a platform status page #1815
• [Feature Request] Add organisation free tags administration section #1816
• [Feature Request] Enhance the dashboard list section #1817
• [Enhancement] Add migration from TheHive 3.5.1 #1818
• [Feature Request] Additional case bulk actions #1821
• [Feature Request] Add support to "isEmpty" filter option #1824
• [Feature Request] Improve task list page #1831
• [Feature Request] Disk usage monitoring API route #1843
• [Feature Request] Allow cancelling task action request #1844
• [Feature Request] Add more quick filters to case list #1848
• [Feature Request] Add support of authentication in webhooks #1850
• [Feature Request] Allow removing a custom field from a case #1852

Closed issues:

• [Feature Request] Alphabetize Case Template view #1551
• [Feature Request] Add the ability to directly close a task #1727
• [Question] Tags and custom fields can be seen across organisations / potential for data leakage #1778
• [Feature Request] Allow user to reorder case templates, or display them in alphabetic order #1787
• [Repository] Improve github issue templates #1840

Fixed bugs:

• Can not view or delete alert when delete the case that created by Import Alert #1123
• Imported Alerts Cannot be Deleted #1201
• [Bug] Creating Cases via API ignores the owner field #1473
• [Bug] Missing cases migrating from TH3 to TH4 #1682
• [Bug] Attachment files are not deleted from local filesystem storage when logs is deleted #1687
• [Bug] Impossible to switch organization if organization name contains an accent #1741
• [Bug] Filtering issue #1753
• Identical URL Observables can still be added multiple times to the same case #1756
• [Bug] Integrity checks for user deduplication is not run when an user is added #1759
• [Bug] Deleting a shared case on org2 doesn't delete task from the Org1 resulting in log spam and undeletable task #1767
• [Bug] Fix pivoting from donuts to search pages on custom fields based widgets #1777
• [Bug] Unable to migrate to TH 4.0.5 #1785
• [Bug] Elapsed time for re-opened cases is showed as "closed". #1796
• [Bug] Observables list doesn't reload #1802
• [Bug] Error in handling users included in many organisations #1803
• [Bug] Organisation users list doesn't include update date #1805
• [Bug] Reveal API key not working for users with profile analyst #1806
• [Bug] Observables not present in some events imported from MISP #1819
• [Bug] Migration: parameter input is unusable #1827
• [Bug] Migration of caseTemplate without task fails #1828
• [Bug] - Use API v1 to fetch observable job history #1838
• [Bug] File observables with special character in name can not be downloaded #1842
• [Bug] Shared dashboards are not editable #1849
• [Bug] Disable the Audit search section #1851

3.5.1

Fixed bugs:

• [Bug] Init Script Syntax Error in Bash Switch-Case #1646
• [Bug] Issues with case attachments section #1651
• [Bug] Fix the severity component #1654
• [Bug] Display problem TH #1688
• [Bug] Update doesn't work on Elasticsearch 7.11 #1799

4.0.5

Implemented enhancements:

• Support for using asterisks by tag-filtering #933
• "Close tasks and case" deletes tasks instead of closing them #1755
• [Enhancement] Add schema update status in status API #1782

Closed issues:

• Running TheHive 4.0.1-1 it appears that application.log is no longer rotated. #1746

Fixed bugs:

• [Bug] RPM package does not create secret.conf file #1248
• [Bug] More webhooks or more detailed webhook events #1739
• [Bug] Webhooks opening infinite amount of files #1743
• [Bug] Dashboards are always created as private #1754
• [Bug]/Unable to get MISP organisation #1758
• [Bug] TheHive 4 Cluster and Haproxy with roundrobin #1760
• [Bug] TheHive -> MISP works. MISP -> TheHive not. #1761
• [Bug] TheHive 4.0.4 cannot show tasks created in previous versions #1763
• [Bug] Imported property in Alerts not taken into account #1769
• [Bug] Sort field list in dashboard widget filters #1771
• [Bug] Dashboard on organisation (and other) doesn't work #1772
• [BUG] Cannot link multiple organisations together #1773
• [Bug] Fix pivoting from donuts to search pages on custom fields based widgets #1777
• [Bug] Fix custom field filters in v0 APIs #1779

4.0.4

Implemented enhancements:

• [Feature Request] Add alert observable API endpoints #1732
• [Feature Request] Add alert import date property #1733
• [Feature Request] Add handling duration properties to imported Alert type #1734

Fixed bugs:

• [Bug] TheHive doesn't start if cassandra is not ready #1725
• [Bug] Alert imported multiple times (bis) #1738
• [Bug] Cosmetic fix in alert observables list #1744

4.0.3

New Features

• [Feature] Added actionRequired for tasks #1701

Implemented enhancements:

• [Enhancement] Change artifacts by observables on the onMouseOver tooltip of the eye icon of observable #1695
• [Enhancement] Enhance support of S3 for attachment storage #1705
• [Enhancement] Update the headers of basic info sections #1710
• [Enhancement] Add poll duration config for UI Stream #1720

Fixed bugs:

• [Bug] MISP filters are not correctly implemented #1685
• [Bug] The query "getObservable" doesn't work for alert observables #1691
• [Bug] Click analyzers mini-report does not load the full report #1694
• [Bug] Import file observable in gui generate error #1697
• [Bug] Cannot search for alerts per observables #1707
• [Bug] Serialization problem in cluster mode #1708
• [Bug] Issue with sorting #1716
• [Bug] Identical URL Observables can be added multiple times to the same case #1718
• Providing output details for Responders #1293

4.0.2

Implemented enhancements:

• [Feature Request] Add a dedicated permission to give access to TheHiveFS #1655
• [Feature Request] Normalize editable input fields #1669

Fixed bugs:

• [Bug] Unable to list Cases #1598
• [Bug] Alert to case merge is broken in v4.0.1 #1648
• [Bug] Attachment.* filters are broken under observable search in v4.0.1 #1649
• [Bug] Result of observable update API v0 is empty #1652
• [Bug] Display issue of custom fields #1653
• [Bug] Persistent AuditSrv:undefined error on 4.0.1 #1656
• [Bug] Issues with case attachments section #1657
• [Bug] API method broken: /api/case/artifact/_search in 4.0.1 #1659
• [Bug] API method broken: /api/case/task/log/_search in 4.0.1 #1660
• [Bug] Unable to define ES index on migration #1661
• [Bug] Dashboard max aggregation on custom-integer field does not work #1662
• [Bug] Missing the fix for errorMessage #1666
• [Bug] Fix alert details dialog #1672
• [Bug] error 500 with adding an empty file in Observables of an Alert #1673
• [Bug] Fix migration of audit logs #1676