AIL Framework version 1.2 released including TheHive and MISP integration

AIL Framework version 1.2 has been released including TheHive and MISP integration.

• AIL Framework is now capable of auto-publishing (based on tags) event in MISP or alerts in TheHive. Events or cases can be created on request when browsing pastes.
• A new submit interface to ease the submission and processing of data in AIL Framework.
• Introduction of a false-positive or true-positive on tag to allow the classification of information. This will be used later to improve automatic classification of information processed.
• GDPR document released about the use of AIL in the scope of processing personal information.

AIL Framework v1.1 released

A new release of the AIL Framework includes new functionalities such as tagging and classification relying on MISP taxonomies and galaxy. For more information, have a look at the AIL wiki.

• Tagging can now be used in the UI and also the modules are automatically tagging based on detection/analysis.
• Tags are now displayed while browsing important pastes and in search results.
• A bug in duplicate modules detection has been fixed to avoid empty hash creation.
• Duplicate hashes are now persistent and stored on disk.

AIL Framework version 1.0 released

AIL Framework version 1.0 released including a migration from Python 2 to Python 3.

• Redis level-db has been moved to ARDB
• UI improvement including the ability to get paste in raw format
• New Base64 detection module to find and decode Base64 data (and save extracted files including metadata)
• New API key detection module such as Google, AWS or alike
• New bitcoin address detection and validation module
• Improved X.509 certificate detection (Keys module)
• Many bug fixes

AIL Framework initial release v0.90

AIL Framework initial release v0.90