Threat Bus 2021.08.26

[lava]

This month's release most prominently features some restructuring in the Threat Bus packages. This includes a breaking change for users of the zmq-app plugin, see the paragraph below.

For VAST Threat Bus, support for live matching in VAST has been restored. It had been disabled after a refactoring on the VAST side.

To work around some UX issues with dashes in nested configuration options, we decided to rename the Threat Bus ZMQ App to Threat Bus ZMQ. Users of this plugin will need to update their config files to move the Threat Bus ZMQ configuration from plugins.zmq-apptoplugins.zmq`.

To combine similar breaking changes in the same release, we also renamed PyVAST Threat Bus to VAST Threat Bus in order to get a more consistent naming scheme.

Changelog Highlights

• 🎁 Live matching with VAST works again!
  #156

• 🐞 Fixed config validation for the 'apps.misp.api' setting.
  #161

• ⚡️ The threatbus-zmq-app package has been renamed to threatbus-zmq, to
  address some limitations in the configuration framework.
  #157

• ⚡️ We renamed PyVAST Threat Bus to VAST Threat Bus for clarity. The PyPI
  package name and the binary name change from pyvast-threatbus to
  vast-threatbus accordingly.
  #159

---

This discussion was created from the release Threat Bus 2021.08.26.