Merge branch 'release/3.7.2'

nusantara-self · nusantara-self · commit e5a338e85cfb · 2026-01-13T15:05:49.000+01:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,6 +8,11 @@
 
 - \[FR\] New Analyzer urlDNA.io [\#1303](https://github.com/TheHive-Project/Cortex-Analyzers/issues/1303)
 
+**Merged pull requests:**
+
+- More vendors rename [\#1407](https://github.com/TheHive-Project/Cortex-Analyzers/pull/1407) ([nusantara-self](https://github.com/nusantara-self))
+- feature: add urlDNA.io analyzers [\#1304](https://github.com/TheHive-Project/Cortex-Analyzers/pull/1304) ([redaelli](https://github.com/redaelli))
+
 ## [3.7.0](https://github.com/TheHive-Project/Cortex-Analyzers/tree/3.7.0) (2026-01-05)
 
 [Full Changelog](https://github.com/TheHive-Project/Cortex-Analyzers/compare/3.6.9...3.7.0)
diff --git a/analyzers/AbuseIPDB/AbuseIPDB.json b/analyzers/AbuseIPDB/AbuseIPDB.json
@@ -33,6 +33,7 @@
     "registration_required": true,
     "subscription_required": true,
     "free_subscription": true,
+    "integration_type": "external_api",
     "service_homepage": "https://www.abuseipdb.com/",
     "service_logo": {
         "path": "assets/abuseipdb.png",
diff --git a/analyzers/Capa/Capa.json b/analyzers/Capa/Capa.json
@@ -24,6 +24,7 @@
     "registration_required": false,
     "subscription_required": false,
     "free_subscription": false,
+    "integration_type": "local",
     "service_homepage": "https://github.com/mandiant/capa",
     "service_logo": {
       "path": "assets/capa.png",
diff --git a/analyzers/ClamAV/ClamAV_FileInfo.json b/analyzers/ClamAV/ClamAV_FileInfo.json
@@ -7,7 +7,7 @@
   "description": "Use Clamscan with custom rules",
   "dataTypeList": ["file"],
   "command": "ClamAV/pyclam_analyzer.py",
-  "baseConfig": "ClamAV"
-  
+  "baseConfig": "ClamAV",
+  "integration_type": "local"
 }
 
diff --git a/analyzers/EmlParser/EmlParser.json b/analyzers/EmlParser/EmlParser.json
@@ -35,6 +35,7 @@
     ],
     "registration_required": false,
     "subscription_required": false,
+    "integration_type": "local",
     "service_homepage": "https://www.strangebee.com",
     "service_logo": {
         "path": "assets/sb-logo.jpg",
diff --git a/analyzers/FileInfo/FileInfo.json b/analyzers/FileInfo/FileInfo.json
@@ -65,5 +65,6 @@
       "multi": false,
       "default": 4
     }
-  ]
+  ],
+  "integration_type": "local"
 }
diff --git a/analyzers/MsgParser/Msg_Parser.json b/analyzers/MsgParser/Msg_Parser.json
@@ -7,5 +7,6 @@
   "description": "Parse Outlook MSG files and extract the main artifacts.",
   "dataTypeList": ["file"],
   "baseConfig": "MsgParser",
-  "command": "MsgParser/parse.py"
+  "command": "MsgParser/parse.py",
+  "integration_type": "local"
 }
diff --git a/analyzers/QrDecode/QrDecode.json b/analyzers/QrDecode/QrDecode.json
@@ -7,5 +7,6 @@
   "description": "Extracts data from one or more QR codes.",
   "dataTypeList": ["file"],
   "command": "QrDecode/qrdecode.py",
-  "baseConfig": "QrDecode"
+  "baseConfig": "QrDecode",
+  "integration_type": "local"
 }
diff --git a/analyzers/SentinelOne/SentinelOne_DeepVisibility_DNSQuery.json b/analyzers/SentinelOne/SentinelOne_DeepVisibility_DNSQuery.json
@@ -44,5 +44,8 @@
             "multi": false,
             "required": false
         }
-    ]
-}
+    ],
+    "subscription_required": true,
+    "registration_required": true,
+    "free_subscription": false
+}
diff --git a/analyzers/Yara/Yara.json b/analyzers/Yara/Yara.json
@@ -42,5 +42,6 @@
   "registration_required": false,
   "subscription_required": false,
   "free_subscription": true,
+  "integration_type": "local",
   "service_homepage": "https://virustotal.github.io/yara/"
 }
diff --git a/thehive-templates/ClusterHawk_1_0/long.html b/thehive-templates/ClusterHawk_1_0/long.html
@@ -75,6 +75,7 @@ <h4>Predictions</h4>
           <tr>
             <th>IP</th>
             <th>Cluster</th>
+            <th>Label</th>
             <th>Confidence</th>
             <th>Uncertainty</th>
             <th>Model Variance</th>
@@ -92,12 +93,16 @@ <h4>Predictions</h4>
                     }">{{ p.cluster }}</span>
               <div class="kh-subtle" ng-if="p.cluster_description"><em>{{ p.cluster_description }}</em></div>
             </td>
+            <td>
+              <span ng-if="p.label">{{ p.label }}</span>
+              <span ng-if="!p.label" class="kh-subtle">-</span>
+            </td>
             <td>{{ p.confidence | number:3 }}</td>
             <td>{{ p.uncertainty | number:3 }}</td>
             <td>{{ p.model_variance | number:4 }}</td>
           </tr>
           <tr ng-repeat-end ng-if="p.cluster_indicators">
-            <td colspan="5" class="kh-subtle" style="background:#f9f9f9">
+            <td colspan="6" class="kh-subtle" style="background:#f9f9f9">
               <strong>Indicators:</strong> {{ p.cluster_indicators }}
             </td>
           </tr>

Original file line number	Diff line number	Diff line change
`@@ -7,7 +7,7 @@`
`7`	`7`	`"description": "Use Clamscan with custom rules",`
`8`	`8`	`"dataTypeList": ["file"],`
`9`	`9`	`"command": "ClamAV/pyclam_analyzer.py",`
`10`		`- "baseConfig": "ClamAV"`
`11`		`-`
	`10`	`+ "baseConfig": "ClamAV",`
	`11`	`+ "integration_type": "local"`
`12`	`12`	`}`
`13`	`13`
Original file line number	Diff line number	Diff line change
`@@ -65,5 +65,6 @@`
`65`	`65`	`"multi": false,`
`66`	`66`	`"default": 4`
`67`	`67`	`}`
`68`		`- ]`
	`68`	`+ ],`
	`69`	`+ "integration_type": "local"`
`69`	`70`	`}`
Original file line number	Diff line number	Diff line change
`@@ -7,5 +7,6 @@`
`7`	`7`	`"description": "Parse Outlook MSG files and extract the main artifacts.",`
`8`	`8`	`"dataTypeList": ["file"],`
`9`	`9`	`"baseConfig": "MsgParser",`
`10`		`- "command": "MsgParser/parse.py"`
	`10`	`+ "command": "MsgParser/parse.py",`
	`11`	`+ "integration_type": "local"`
`11`	`12`	`}`
Original file line number	Diff line number	Diff line change
`@@ -7,5 +7,6 @@`
`7`	`7`	`"description": "Extracts data from one or more QR codes.",`
`8`	`8`	`"dataTypeList": ["file"],`
`9`	`9`	`"command": "QrDecode/qrdecode.py",`
`10`		`- "baseConfig": "QrDecode"`
	`10`	`+ "baseConfig": "QrDecode",`
	`11`	`+ "integration_type": "local"`
`11`	`12`	`}`
Original file line number	Diff line number	Diff line change
`@@ -42,5 +42,6 @@`
`42`	`42`	`"registration_required": false,`
`43`	`43`	`"subscription_required": false,`
`44`	`44`	`"free_subscription": true,`
	`45`	`+ "integration_type": "local",`
`45`	`46`	`"service_homepage": "https://virustotal.github.io/yara/"`
`46`	`47`	`}`