A new version of MISP 2.4.58 has been released, including bug fixes and a specific improvement to the correlation feature.
Correlation can be disabled at the instance level, or, if a new setting is enabled, at the event or at the attribute level by a site admin or the creator of the event. The latter is an optional feature that can be enabled or disabled system-wide in MISP. This allows for a flexible scheme, supporting situations where the correlations of certain events or attributes are not interesting for the analysts. This feature is also available via the API.
The release includes various improvements such as:
A big thanks to all the users who gave feedback and contributors who helped us improve MISP.
The full change log is available here.
Don’t hesitate to open an issue if you have any feedback, found a bug or want to propose new features.