Dear contributors and beta-testers,
We recently changed did some changes in the implementation of the harmonization.
The type MalwareName has been removed, it was just a duplicate of String. This may break your existing installation if you do not update your harmonization.conf with upstream. It has been used as type for malware.name The type LowercaseString has been introduced, doing a conversion to lower case chars automatically. Applied to protocol names, emails, hashes and UUIDs etc. FQDNs are now lower case only too. Some restrictive regexes have been made more tolerant (e.g. malware names) misp_uuid is now misp.event_uuid misp.attribute_uuid introduced new iregex-type check available (case-insenstitive regex-check) allowed values for protocol.transport is a defined list
Also: Currently, both ASCII and IDN-domains are allowed, this will be changed too (including automatic conversion): https://github.com/certtools/intelmq/issues/622
When pulling from our upstream-repository, make sure you also update your harmonization.conf
Related commits: https://github.com/certtools/intelmq/commit/6624bdda04ca0595799150e97e719a5d... https://github.com/certtools/intelmq/commit/640e1a771acb4ddb9cbd726e51ae9031... https://github.com/certtools/intelmq/commit/fd81f0fd9c86ffa0ac3764adafc74e79... https://github.com/certtools/intelmq/commit/7dbed4bc8f9200d06dae2018850341a8... https://github.com/certtools/intelmq/commit/6b8b759293069afc3d9f0f1cdf8e4eaf... https://github.com/certtools/intelmq/commit/d7892bcb59ac54218c5c45630226d4a3... https://github.com/certtools/intelmq/commit/6584ab72fa408732c02abc1c934637a5... https://github.com/certtools/intelmq/commit/a742c034c80249e80d2f280fd0dc8a72...
Sebastian