Release/v11.1.2 (#1520)

* feat: add system owner field to alert response rules and update related logic

* feat: add systemOwner filter to playbooks component

Signed-off-by: Manuel Abascal <[email protected]>

* feat: add system owner field to alert response rules and update related logic

* feat: enhance playbook component with improved layout and functionality

Signed-off-by: Manuel Abascal <[email protected]>

* feat: enhance playbook component with improved layout and functionality

Signed-off-by: Manuel Abascal <[email protected]>

* feat: enhance playbook component with improved layout and functionality

Signed-off-by: Manuel Abascal <[email protected]>

* feat: add system owner field to alert response rules and update related logic

* feat: enhance playbook component with improved layout and functionality

Signed-off-by: Manuel Abascal <[email protected]>

* feat: update agent handling strategy description for clarity and context

Signed-off-by: Manuel Abascal <[email protected]>

* feat: update agent handling strategy description for clarity and context

Signed-off-by: Manuel Abascal <[email protected]>

* fix: change PostgreSQL logger level from WARN to ERROR

* feat: update log handling and display logic for improved clarity and consistency

Signed-off-by: Manuel Abascal <[email protected]>

* feat: update log filter selection to improve user experience

Signed-off-by: Manuel Abascal <[email protected]>

* fix: handle potential null value in audits length check

Signed-off-by: Manuel Abascal <[email protected]>

* fix: update filterBySelect method to accept a generic field type

Signed-off-by: Manuel Abascal <[email protected]>

* feat: update workflows and send to new cm in gcp

* feat: include script to compile installer

* fix: resolve workflow errors and improve cross-platform compatibility

* fix problem with agent SIGN KEY

* feat: implement service to automatically assign asset groups to alerts

* feat: add asset group fields to alert constants and configuration

Signed-off-by: Manuel Abascal <[email protected]>

* feat(agent/syslog): add RFC 5424 octet counting framing support and improve message handling

* fix: always update pending versions

* improve v11 changelog

* feat: enhance playbook UI and loading behavior, add new alert fields

Signed-off-by: Manuel Abascal <[email protected]>

* feat(oauth2): implement corporate authentication with OAuth2 support

* feat(identity-provider): add OAuth2/OpenID Connect provider management

Signed-off-by: Manuel Abascal <[email protected]>

* feat(identity-provider): add OAuth2/OpenID Connect provider management

Signed-off-by: Manuel Abascal <[email protected]>

* feat: implement service to automatically assign asset groups to alerts

* feat(identity-provider): add OAuth2/OpenID Connect provider management

Signed-off-by: Manuel Abascal <[email protected]>

* feat(oauth2): enhance corporate authentication with additional fields and event handling

* feat: add CrowdStrike plugin core implementation

* feat: add gRPC configuration management for CrowdStrike

* feat(oauth2): enhance corporate authentication with additional fields and event handling

* feat(oauth2): enhance corporate authentication with additional fields and event handling

* feat(identity-provider): add OAuth2/OpenID Connect provider management

Signed-off-by: Manuel Abascal <[email protected]>

* feat(oauth2): enhance corporate authentication with additional fields and event handling

* feat(identity-provider): add OAuth2/OpenID Connect provider management

Signed-off-by: Manuel Abascal <[email protected]>

* refactor: update version info handling and clean up community module display

Signed-off-by: Manuel Abascal <[email protected]>

* Update frontend/src/app/shared/components/auth/login/login.component.ts

Co-authored-by: Copilot <[email protected]>

* Update frontend/src/app/shared/components/auth/login-providers/login-providers.component.ts

Co-authored-by: Copilot <[email protected]>

* Update backend/src/main/java/com/park/utmstack/config/SecurityConfiguration.java

Co-authored-by: Copilot <[email protected]>

* Update backend/src/main/java/com/park/utmstack/service/idp_provider/IdentityProviderService.java

Co-authored-by: Copilot <[email protected]>

* Update frontend/src/app/app-management/identity-provider/shared/components/provider-form/provider-form.component.ts

Co-authored-by: Copilot <[email protected]>

* feat(oauth2): enhance corporate authentication with additional fields and event handling

* refactor: simplify request structure and improve provider toggle logic

Signed-off-by: Manuel Abascal <[email protected]>

* feat(oauth2): implement enterprise version handling for identity providers

Signed-off-by: Manuel Abascal <[email protected]>

* feat: add adversary view menu and associated authorities to database

* feat: add adversary management module with routing and view components

Signed-off-by: Manuel Abascal <[email protected]>

* refactor: remove deprecated standalone plugin architecture

* feat: add adversary management module with routing and view components

Signed-off-by: Manuel Abascal <[email protected]>

* feat: implement adversary alerts management with new DTOs and service

* feat: add SQL query support to LogExplorer via OpenSearch

* feat: add SQL query support to LogExplorer via OpenSearch

* feat: implement adversary alerts graph and service for data retrieval

Signed-off-by: Manuel Abascal <[email protected]>

* feat: enhance timezone handling by dynamically generating timezone list

Signed-off-by: Manuel Abascal <[email protected]>

* feat: enhance timezone handling by dynamically generating timezone list

Signed-off-by: Manuel Abascal <[email protected]>

* feat: add adversary management module with routing and view components

Signed-off-by: Manuel Abascal <[email protected]>

* feat: add adversary management module with routing and view components

Signed-off-by: Manuel Abascal <[email protected]>

* feat: add adversary view menu and associated authorities to database

* feat: implement adversary alerts graph and service for data retrieval

Signed-off-by: Manuel Abascal <[email protected]>

* feat: implement adversary alerts management with new DTOs and service

* feat: enhance adversary alerts graph layout and styling for improved visualization

Signed-off-by: Manuel Abascal <[email protected]>

* feat: enhance adversary alerts graph layout and styling for improved visualization

Signed-off-by: Manuel Abascal <[email protected]>

* fix[bitdefender-plugin]: make StartServer blocking and remove retry loop

* update macos guide

* feat: enhance adversary alerts graph layout and styling for improved visualization

Signed-off-by: Manuel Abascal <[email protected]>

* feat: enhance adversary alerts graph layout and styling for improved visualization

Signed-off-by: Manuel Abascal <[email protected]>

* feat: implement adversary alerts management with new DTOs and service

* fix: adjust TFA expiration time to use configurable constant

* feat: conditionally render module card based on module name

Signed-off-by: Manuel Abascal <[email protected]>

* feat: add application version info retrieval functionality

* feat: add application version info retrieval functionality

Signed-off-by: Manuel Abascal <[email protected]>

* feat: compliance report view component

* feat: add SQL query support to LogExplorer via OpenSearch

* feat: add SQL query support to LogExplorer via OpenSearch

* feat(saml): implement SAML authentication support with identity provider configuration

* feat(saml): implement SAML authentication support with identity provider configuration

Signed-off-by: Manuel Abascal <[email protected]>

* feat: add application version info retrieval functionality

* fix: remove conditional rendering for AS_400 module and filter out in module retrieval

Signed-off-by: Manuel Abascal <[email protected]>

* feat(saml): enhance SAML authentication success handler to include role-based authorities

* feat(o365-plugin): add multi-cloud environment support for Microsoft Cloud (Commercial, GCC, GCC High, DoD)

* feat: add exception handling for MethodArgumentNotValidException and update UtmModuleConfigValidator logic

* fix(o365-plugin): Remove invalid field check and add multi-cloud support

- Implement cloud-aware connection checking per authority
- Use correct endpoints and scopes for each cloud environment

* feat: add SQL query support to LogExplorer via OpenSearch

* feat(o365-plugin): add Office 365 cloud environment configuration options

* Update backend/src/main/resources/config/liquibase/changelog/20251125001_add_environment_o365_integration.xml

Co-authored-by: Copilot <[email protected]>

* Update backend/src/main/java/com/park/utmstack/domain/application_modules/factory/impl/ModuleO365.java

Co-authored-by: Copilot <[email protected]>

* Update backend/src/main/java/com/park/utmstack/domain/application_modules/UtmModuleGroupConfiguration.java

Co-authored-by: Copilot <[email protected]>

* feat: add SQL query support to LogExplorer via OpenSearch

* feat: add SQL query support to LogExplorer via OpenSearch

* feat: add SQL query support to LogExplorer via OpenSearch

* feat: add SQL query support to LogExplorer via OpenSearch

* feat: add SQL query support to LogExplorer via OpenSearch

* fix: update file permissions from 777 to 755 for security improvements

* feat(azure plugin): enhance Azure cloud detection and connection validation

* feat(o365_validation-modules-config): add Management API validation and multi-cloud endpoint support

* feat(header): integrate version info display and update logic

Signed-off-by: Manuel Abascal <[email protected]>

* refactor: rename UtmStackConnectionService to ModuleConfigurationValidationService and enhance validation logic

* feat(exception-handling): add ApiException class and global exception handler

* feat: add SQL query support to LogExplorer via OpenSearch

* feat: add SQL query support to LogExplorer via OpenSearch

* feat(int-generic-group-config): improve searchable option based on config options length

Signed-off-by: Manuel Abascal <[email protected]>

* feat(int-generic-group-config): improve searchable option based on config options length

Signed-off-by: Manuel Abascal <[email protected]>

* fix(modules-config): disable CROWDSTRIKE module not implemented in backend.

* refactor(plugins): standardize logging with catcher

* feat(saml): update identity provider configuration to include metadata URL and remove deprecated fields

* style(dashboard): adjust padding and layout for improved UI consistency

Signed-off-by: Manuel Abascal <[email protected]>

* fix: optimize cloud detection logic in connection string parsing

* feat(elastic-filter-time): enhance time filter functionality and update UI interactions

Signed-off-by: Manuel Abascal <[email protected]>

* feat(azure): extract individual records from Azure Event Hub logs

Parse Azure logs with 'records' array structure and send each record
as a separate log entry for better indexing and security analysis.
Maintains backward compatibility for logs without records array.

* fix(modules-config): remove gin default logger middleware to eliminate non-standardized HTTP logs while maintaining catcher logging standard and panic protection.

* refactor(azure-filter): deleted 'Expand log.records' data to improve parsing

* refactor(gcp-filter): deleted 'Expand jsonPayload.structuredRdata' data to improve parsing

* update the version of the Azure and GCP filters

* feat(saml): update identity provider configuration to include metadata URL and remove deprecated fields

* feat(provider): add SAML 2.0 support with metadata URL and service provider configuration

Signed-off-by: Manuel Abascal <[email protected]>

* feat(saml): enhance identity provider creation with multipart form data and encryption for private key

* feat(provider): add SAML 2.0 support with metadata URL and service provider configuration

Signed-off-by: Manuel Abascal <[email protected]>

* fix(totp): prevent potential error by checking subscription before unsubscribe

Signed-off-by: Manuel Abascal <[email protected]>

* style(totp): comment out unused email resend container for cleaner code

Signed-off-by: Manuel Abascal <[email protected]>

* style(utm-code-view): add word-break class to code element for better text handling

Signed-off-by: Manuel Abascal <[email protected]>

* feat(filters): add Azure and GCP filters with updated field mappings and severity handling

* refactor(ModuleSocAi): remove unused getName method for cleaner code

* fix(deployment-pipeline): update tag pattern for v10 to support semantic versioning

* chore(changelog): update release notes for UTMStack v11.0.3 with fixed issues and performance improvements

* chore(changelog): update release notes for UTMStack v11.0.3 with fixed issues and performance improvements

* feat(authentication): add SAML and OIDC support with validation for private keys and certificates

* chore(master.xml): remove outdated environment integration and filter update changelogs

* feat(identity-provider): enhance provider management with file uploads and validation

Signed-off-by: Manuel Abascal <[email protected]>

* feat(authentication): enhance SAML and OIDC support with file validation and metadata URL checks

* feat(identity-provider): enhance provider management with file uploads and validation

Signed-off-by: Manuel Abascal <[email protected]>

* feat(identity-provider): enhance provider management with file uploads and validation

Signed-off-by: Manuel Abascal <[email protected]>

* Refactor adversary alerts graph component and update no data display

Signed-off-by: Manuel Abascal <[email protected]>

* Remove redundant getName() method override in ModuleSocAi

* Update frontend/src/app/data-management/alert-management/shared/components/filters/alert-generic-filter/alert-generic-filter.component.ts

Co-authored-by: Copilot <[email protected]>

* feat: add SQL query support to LogExplorer via OpenSearch

* feat: add SQL query support to LogExplorer via OpenSearch

* feat: enhance LogExplorer with SQL query support and custom keyword suggestions

* Update backend/src/main/java/com/park/utmstack/service/dto/elastic/SqlSearchDto.java

Co-authored-by: Copilot <[email protected]>

* feat: enhance identity provider management with role requirements and UI improvements

Signed-off-by: Manuel Abascal <[email protected]>

* feat: update login components for improved styling and provider text

Signed-off-by: Manuel Abascal <[email protected]>

* feat: add loading screen with spinner and enhance app initialization

Signed-off-by: Manuel Abascal <[email protected]>

* feat(agents): update agent guide with Kali Linux tab and enhance installation command structure

* feat: add SAML OIDC corporate authentication configuration fields

* feat: add SAML OIDC corporate authentication support with SP entity ID and ACS URL

Signed-off-by: Manuel Abascal <[email protected]>

* feat(api-keys): implement API key management with creation, retrieval, update, and deletion functionalities

* feat: integrate app version management and enterprise feature directive

Signed-off-by: Manuel Abascal <[email protected]>

* feat: enhance SAML2 login handlers with role validation and logging

* feat: enhance SAML2 login handlers with role validation and logging

* feat: enhance SAML2 login handlers with role validation and logging

* feat: integrate app version management and enterprise feature directive

Signed-off-by: Manuel Abascal <[email protected]>

* feat: update API route for version checking to check-for-updates

Signed-off-by: Manuel Abascal <[email protected]>

* feat: remove client secret display from provider details

Signed-off-by: Manuel Abascal <[email protected]>

* fix: update application version file path and improve pagination offset calculation

* fix: update application version file path and improve pagination offset calculation

* fix: update opensearch-connector version to 1.0.4

* feat: enhance enterprise module directive to support dynamic menu names and icons

Signed-off-by: Manuel Abascal <[email protected]>

* fix: streamline loading state management in playbook service and clean up filter parameters in playbooks component

Signed-off-by: Manuel Abascal <[email protected]>

* fix: update UtmModuleRepository and UtmModuleService to use Optional for findByServerIdAndModuleName method

* feat: add detail view for alerts in echoes component and improve alert display

Signed-off-by: Manuel Abascal <[email protected]>

* fix: improve error handling in CleanCountedLogs to create default data retention file if retrieval fails

* feat: enhance adversary alerts graph with dynamic graphic elements and improved chart container styling

Signed-off-by: Manuel Abascal <[email protected]>

* Update frontend/src/app/data-management/alert-management/shared/components/alert-echoes/alert-echoes.component.html

Co-authored-by: Copilot <[email protected]>

* Update frontend/src/app/data-management/alert-management/shared/components/alert-echoes/alert-echoes.component.html

Co-authored-by: Copilot <[email protected]>

* feat: enhance detail view for alerts in echoes component and improve data handling

Signed-off-by: Manuel Abascal <[email protected]>

* feat: enhance adversary alerts graph with dynamic graphic elements and improved chart container styling

Signed-off-by: Manuel Abascal <[email protected]>

* feat: enhance adversary alerts graph with dynamic graphic elements and improved chart container styling

Signed-off-by: Manuel Abascal <[email protected]>

* refactor: reorganize imports in adversary alerts graph component for improved readability

Signed-off-by: Manuel Abascal <[email protected]>

* refactor: reorganize imports in adversary alerts graph component for improved readability

Signed-off-by: Manuel Abascal <[email protected]>

* chore: update changelog for UTMStack v11.1.1 release, add fixes and features

* fix: handle version info loading error gracefully

Signed-off-by: Manuel Abascal <[email protected]>

* feat: refactor module update process to use ModuleDTO and enhance decryption handling

* feat: enhance adversary alerts graph with improved event handling and child alert metadata

Signed-off-by: Manuel Abascal <[email protected]>

* feat: add SAML2 login endpoint to front-end configuration

* fix: ensure getPatternStoredFields returns an empty array if no fields are found

Signed-off-by: Manuel Abascal <[email protected]>

* chore: update CHANGELOG for UTMStack v11.1.2 release

Signed-off-by: Manuel Abascal <[email protected]>

---------

Signed-off-by: Manuel Abascal <[email protected]>
Co-authored-by: Yorjander Hernandez Vergara <[email protected]>
Co-authored-by: JocLRojas <[email protected]>
Co-authored-by: Copilot <[email protected]>
Co-authored-by: Elena Lopez Milan <[email protected]>
Co-authored-by: Osmany Montero <[email protected]>
Co-authored-by: Yadian Llada Lopez <[email protected]>

Author: 7 people

CHANGELOG.md

@@ -1,9 +1,6 @@
-# UTMStack 11.1.1
+# UTMStack 11.1.2
 
-These are the release notes for **UTMStack v11.1.1**, highlighting new features, bug fixes, and performance improvements.
+These are the release notes for **UTMStack v11.1.2**, highlighting new features, bug fixes, and performance improvements.
 
 ## Fixes
-- Improved the module activation and deactivation process to handle missing modules more robustly and prevent errors when activating integrations.
-
-## Features
-- Enabled inline expand/collapse functionality for alert echo rows.
+- Fixed initial loading issue in Log Explorer where pattern stored fields were not properly initialized on startup.

frontend/src/app/shared/services/elasticsearch/local-field.service.ts

@@ -14,7 +14,7 @@ export class LocalFieldService {
   }
 
   getPatternStoredFields(indexPattern: string): ElasticSearchFieldInfoType[] {
-    return this.localStorage.retrieve(indexPattern + INDEX_PATTERN_FIELD);
+    return this.localStorage.retrieve(indexPattern + INDEX_PATTERN_FIELD) || [];
   }
 
   setPatternStoredFields(indexPattern: string, fields: ElasticSearchFieldInfoType[]) {