AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← Malware catalog

Attributed metadata history

REPORTPUBLIC METADATA

3.2.0-20260729

Download the ISO https://github.com/Security-Onion-Solutions/securityonion/blob/d3c6fdce7e04cd981f1d3014af2ca35d0f8407f5/DOWNLOAD_AND_VERIFY_ISO.md What's Changed Bump version from 3.1.0 to 3.2.0 by @TOoSmOotH in #15918 Add 3.2.0 option to discussion template by @TOoSmOotH in #15919 main to dev for hotfix by @TOoSmOotH in #15939 Remove outdated HOTFIX version number by @TOoSmOotH in #15940 Jertel/wip by @m0duspwnens in #15944 refactored soc config by @jertel in #15947 fix version by @jertel in #15949 check if there is a version or hotfix to upgrade to before verifiying elasticsearch compatibility by @reyesj2 in #15951 use so-config-backup script in soup by @reyesj2 in #15952 run elastic agent regen installer script in post_to_3.2.0 by @reyesj2 in #15954 config updates by @jertel in #15955 higstate on host start, not salt-minion start by @m0duspwnens in #15956 fix elasticsearch template generation issue by @reyesj2 in #15958 respect elasticfleet enable_auto_configuration setting for so-elastic… by @reyesj2 in #15961 use pipe exit status for update_docker_containers by @reyesj2 in #15964 remove startup states from salt config by @m0duspwnens in #15965 Jertel/wip by @jertel in #15967 update so-elastic-fleet-package-upgrade script by @reyesj2 in #15966 userid vs names by @defensivedepth in #15971 Data stream lifecycle management support by @reyesj2 in #15973 remove pillar merge by @reyesj2 in #15978 es|ql defaults by @jertel in #15974 add context to soup errors by @reyesj2 in #15979 Pin NIC names by MAC via udev (run-once) from the common state by @TOoSmOotH in #15970 don't create stack trace when set -e is disabled by @reyesj2 in #15982 wip by @m0duspwnens in #15983 Upgrade registry by @jertel in #15984 allow manager two full highstates during soup, improve elastic script runtime by @m0duspwnens in #15985 remove heayvnode FleetServer_* directory creation, and skip empty dir… by @reyesj2 in #16006 Fix premature fail_setup function call in so-setup by @triggerman86 in #16005 support multiple capinfos versions by @jertel in #16008 Add UEK8 kernel repo support across install and grid by @TOoSmOotH in #16000 Set transport for ssl.established:false logs by @defensivedepth in #16009 Switch boot default to UEK8 kernel and gate kernel repo on salt version by @TOoSmOotH in #16011 Serve /kernelrepo through nginx so minions can reach the kernel repo by @TOoSmOotH in #16012 update so-stop | so-start | so-restart scripts by @reyesj2 in #16013 soup upgrade kafka cluster metadata v4 by @reyesj2 in #16018 suricata: verify reloaded ruleset is newer than the rules file by @m0duspwnens in #16021 remove outdated eval script and associated salt utility state by @reyesj2 in #16024 update airgap soup to sync uek repo from iso by @reyesj2 in #16023 increase wait_for_so-kibana timeout to 10m by @reyesj2 in #16027 duplicate repo name in so-repo-sync by @reyesj2 in #16028 only reload suricata rules if all-rulesets.rules exists by @m0duspwnens in #16029 avoid setup failure reason ambiguity by @jertel in #16033 update default hunt query by @reyesj2 in #16035 support sigma playbooks by @defensivedepth in #16019 Add cluster_health option to telegraf.conf by @TOoSmOotH in #16039 Add repo names by @defensivedepth in #16041 Feature/agentic by @coreyogburn in #16030 recollate databases by @jertel in #16046 verify elastic-agent reports healthy status before completing install… by @reyesj2 in #16045 add missing so-logs-soc annotation by @reyesj2 in #16049 restart soc after re-initing db by @jertel in #16050 elastic fleet server persistence by @reyesj2 in #16052 exit so-setup early for issues with so-elastic-fleet-setup by @reyesj2 in #16055 toggle pg metrics by @jertel in #16058 status messages for so-elastic-fleet-setup by @reyesj2 in #16059 ES 9.3.7 by @reyesj2 in #16062 prevent login redirect to any API url by @jertel in #16064 soup: make failed upgrades and hotfixes resumable by @TOoSmOotH in #16069 Install UEK8 in so-kernel-upgrade when no UEK kernel is p

Reference details

Source category
research-report
First reported
Jul 29, 2026 18:12 UTC
Last reported
Jul 29, 2026 18:12 UTC
Catalog updated
Oct 16, 2026 16:37 UTC
Record ID
6f64ffb1fc400ea9e082eb79fa541c681b74bf3371f6e1024ab4fecc1cdc59b5

Published indicators

Network indicators are visibly defanged. This page does not make them clickable or send them to another service.

No validated file hashes or network indicators are stored for this record.

Source observations

intelligence_src_c9021b111f15780880

Source-provided label
Publisher RSS metadata
Evidence class
mentioned in report
Confidence
Not reported
Observed
Jul 29, 2026 18:12 UTC
Retrieved
Oct 16, 2026 16:37 UTC

This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.

Feed collection status

Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.

1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.

Review source update dates and status
  • intelligence_src_c9021b111f15780880Recent successful batchLast successful batch: Last attempt:

Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.