Hi,

We recently published a blog post about the release, summarizing a few of the major changes: https://cert.at/en/blog/2021/8/intelmq-30-domain-based-workflow-ieps

Sebastian

On 7/5/21 5:59 PM, Sebastian Wagner wrote:

Dear community,

The time has come and IntelMQ 3.0 is final! We, as community, made loads of changes, smaller and bigger ones, and I really think that IntelMQ became more user-friendly, developer-friendly and feature-rich at the same time!

There are some major changes in this release, especially the in the field of the configuration and Internal Data format (previously: "harmonization"). For the configuration-part, the upgrade part should be automatic with `intelmqctl upgrade-config` as usual. For the Data format, carefully look at your bot configurations (filters, sieve, etc.) to update them. Adaptions in systems connected to IntelMQ, especially also databases might be necessary as well. The NEWS.md file give a summary of what has changed: https://github.com/certtools/intelmq/blob/maintenance/NEWS.md#user-content-300-major-release-2021-07-02

We don't recommend to upgrade existing production instance of IntelMQ yet. We of course did testing, including the end-to-end tests, and have detailed release notes. But for critical systems, a delayed upgrade makes sense ;)
Therefore the stable deb/rpm repositories don't contain the 3.0 release yet! Even though an upgrade of production systems is not yet recommended, extensive usage and testing of the new releases are very much welcome and required to get the necessary feedback for the next (maintenance) releases.

The releases are available via git, PyPI, Docker and the *unstable* deb/rpm repositories.

Installation documentation: https://intelmq.readthedocs.io/en/maintenance/user/installation.html
Upgrade documentation: https://intelmq.readthedocs.io/en/maintenance/user/upgrade.html
IntelMQ API documentation: https://intelmq.readthedocs.io/en/maintenance/user/intelmq-api.html
IntelMQ Manager documentation: https://intelmq.readthedocs.io/en/maintenance/user/intelmq-manager.html

NEWS/release notes of IntelMQ (Core): https://github.com/certtools/intelmq/blob/maintenance/NEWS.md#user-content-300-major-release-2021-07-02
Full Changelog of IntelMQ (Core): https://github.com/certtools/intelmq/blob/maintenance/CHANGELOG.md#300-2021-07-02

On a high level, these are the major changes compared to version 2.3.x (2.3.3 was released 2021-05-31):

In the core and Docker:

New and majorly enhanced bots:

On the documentation front, these are the most important changes

And not to forget all the smaller changes and additions.

Thanks to (in random order)

Raphaël Vinot (circl.lu)
Bernhard Reiter (intevation.de)
Sebastian Wagner (CERT.AT)
Filip Pokorný (CSIRT.CZ)
Guillaume GRANJON de LÉPINEY (CERT XLM excellium-services.com)
Mikk Margus Möll (CERT.ee)
Alex Kaplan
Thomas Hungenberg (CERT-BUND.DE)
Einar Lanfranco (CERT-UNLP cert.unlp.edu.ar)
Christopher Schappelwein (milCERT, BMLV.gv.at)
Marcos Gonzalez (CSIRT-RD cncs.gob.do/csirt-rd/)
Marius Karotkis (NRDCS.LT)
Sebastian Waldbauer (CERT.AT)
Jeremias Pretto (CERT-UNLP cert.unlp.edu.ar)
Karl-Johan Karlsson (Linköping University LIU.SE)
Birger Schacht (CERT.AT)

... and all the contributors of previous releases and as well to all reporters, supporters, etc!

best regards
Sebastian

-- 
// Sebastian Wagner <wagner@cert.at> - T: +43 676 898 298 7201
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg

-- 
// Sebastian Wagner <wagner@cert.at> - T: +43 676 898 298 7201
// CERT Austria - https://www.cert.at/
// Eine Initiative der nic.at GmbH - https://www.nic.at/
// Firmenbuchnummer 172568b, LG Salzburg