Skip to main content

Changelog for Azul Plugins

DateRepositoryTitle
2026-06-26yarafix: yara ingest fails on too many streams. ..36.
2026-06-12retrohuntfix: add new intervals to bucket ..61.
2026-06-11macofeat: add partial completion support. ..43.
2026-06-10retrohuntfeat: add more metrics ..60.
2026-06-08retrohuntfix: fix cronjob ..57.
2026-06-05retrohuntfix: fix return type ..56.
2026-06-04retrohuntfix: enum issue ..54.
2026-06-04js-deobffeat: additional lock file maintenance ..19.
2026-06-04pythonfeat: additional lock file maintenance. ..24.
2026-06-04ghidrafeat: additional lock file maintenance. ..30.
2026-06-04lookbackfeat: additional lock file maintenance. ..11.
2026-06-04truncatedfeat: additional lock file maintenance. ..33.
2026-06-04dotnet-decompilerfeat: additional lock file maintenance. ..30.
2026-06-04richidfeat: additional lock file maintenance. ..34.
2026-06-04repeated-bytesfeat: additional lock file maintenance. ..31.
2026-06-04nsrlfeat: additional lock file maintenance. ..31.
2026-06-04debloatfeat: additional lock file maintenance. ..33.
2026-06-04malcarvefeat: additional lock file maintenance. ..9.
2026-06-04image-convertfeat: additional lock file maintenance. ..34.
2026-06-03virustotalfix: settings not loading correctly. ..52.
2026-06-02virustotalfeat: filter input events based on security. ..51.
2026-05-25mandiant-capafeat: upgrading flare.capa ..14.
2026-05-25macofeat: remove yara python ..41.
2026-05-20virustotalfeat: ensure download event source path isnt modified ..44.
2026-05-20macofeat: add maco version to plugin config ..40.
2026-05-12retrohuntfix: fix check hashes functionality ..49.
2026-05-07yarafix: yara events too large for dispatcher. ..34.
2026-04-30retrohuntfix: remove restapi trigger ..46.
2026-04-29retrohuntfix: fix api calls ..35.
2026-04-28yarafeat: include yara hits as streams. ..25.
2026-04-28retrohuntfix: retrohunt timing buckets ..21.
2026-04-20macoadded line for dead drop resolver feature in connections ..26.
2026-04-20retrohuntfix: fix endpoints ..34.
2026-04-17pdftoolsfeat: upgrade didier scripts. ..12.
2026-04-17ghidrafeat: upgrade ghidra ..13.
2026-04-17unboxfeat: upgrade 7zip ..14.
2026-04-17netinfofeat: upgrade with latest ja3 changes. ..11.
2026-04-17script-decoderfeat: cleanup all the un.used didier libraries. ..11.
2026-04-17repeated-bytesfeat: remove black badge ..10.
2026-04-17suricatafeat: upgrade suricata to version 8. ..11.
2026-04-17yarafix: add openssh.client to debian.txt ..11.
2026-04-17macofix: add openssh.client to debian.txt ..12.
2026-04-17suricatafix: add openssh.client to debian.txt ..10.
2026-04-16retrohuntfix: fix divisor ..25.
2026-04-16retrohuntfeat: fix stale job collection ..13.
2026-04-15alphabetsfix: dockerfile was missing semicolon. ..13.
2026-04-10alphabetsfix: dockerfile was missing semicolon. ..13.
2026-04-10retrohuntfix: dockerfile was missing semicolon. ..20.
2026-04-10js-deobffix: dockerfile was missing semicolon. ..9.
2026-04-10unboxfix: dockerfile was missing semicolon. ..12.
2026-04-10flossfix: dockerfile was missing semicolon. ..9.
2026-04-10tikafix: dockerfile was missing semicolon. ..12.
2026-04-10pythonfix: dockerfile was missing semicolon. ..13.
2026-04-10dotnet-deobfix: dockerfile was missing semicolon. ..10.
2026-04-10dotnet-decompilerfix: dockerfile was missing semicolon. ..9.
2026-04-10image-convertfix: dockerfile was missing semicolon. ..9.
2026-04-10de4dotfix: dockerfile was missing semicolon. ..10.
2026-04-10export-hashesfix: dockerfile was missing semicolon. ..8.
2026-04-10entrypointcheckfix: dockerfile was missing semicolon. ..9.
2026-04-10android-parserfix: dockerfile was missing semicolon. ..8.
2026-04-10portexfix: dockerfile was missing semicolon. ..8.
2026-04-10richidfix: dockerfile was missing semicolon. ..8.
2026-04-10repeated-bytesfix: dockerfile was missing semicolon. ..8.
2026-04-10yarafix: dockerfile was missing semicolon. ..9.
2026-04-10script-decoderfix: dockerfile was missing semicolon. ..9.
2026-04-10suricatafix: dockerfile was missing semicolon. ..8.
2026-04-10emailfix: dockerfile was missing semicolon. ..11.
2026-04-10nsrlfix: dockerfile was missing semicolon. ..9.
2026-04-10capefix: dockerfile was missing semicolon. ..9.
2026-04-10lookbackfix: dockerfile was missing semicolon. ..8.
2026-04-10qrcodefix: dockerfile was missing semicolon. ..8.
2026-04-10netinfofix: dockerfile was missing semicolon. ..9.
2026-04-10exiftoolfix: dockerfile was missing semicolon. ..9.
2026-04-10alphabetsfix: dockerfile was missing semicolon. ..13.
2026-04-10lieffix: dockerfile was missing semicolon. ..9.
2026-04-10officefix: dockerfile was missing semicolon. ..9.
2026-04-10build-time-stringsfix: dockerfile was missing semicolon. ..8.
2026-04-10shortcutfix: dockerfile was missing semicolon. ..8.
2026-04-10assemblylinefix: dockerfile was missing semicolon. ..9.
2026-04-10truncatedfix: dockerfile was missing semicolon. ..9.
2026-04-10index-coincidencefix: dockerfile was missing semicolon. ..8.
2026-04-10malcarvefix: dockerfile was missing semicolon. ..8.
2026-04-10pdftoolsfix: dockerfile was missing semicolon. ..10.
2026-04-10debloatfix: dockerfile was missing semicolon. ..8.
2026-04-10certificatesfix: dockerfile was missing semicolon. ..8.
2026-04-09nsrlfeat: exclude newer python packages. ..8.
2026-04-09dotnet-decompilerfeat: exclude newer python packages. ..8.
2026-04-09flossfeat: exclude newer python packages. ..8.
2026-04-09js-deobffeat: exclude newer python packages. ..8.
2026-04-09pythonfeat: exclude newer python packages. ..12.
2026-04-09emailfeat: exclude newer python packages. ..10.
2026-04-09alphabetsfeat: exclude newer python packages. ..12.
2026-04-09image-convertfeat: exclude newer python packages. ..8.
2026-04-09ghidrafeat: exclude newer python packages. ..10.
2026-04-09dotnet-deobfeat: exclude newer python packages. ..9.
2026-04-09exiftoolfeat: exclude newer python packages. ..8.
2026-04-09assemblylinefeat: exclude newer python packages. ..8.
2026-04-09alphabetsfeat: exclude newer python packages. ..12.
2026-04-09debloatfeat: exclude newer python packages. ..7.
2026-04-09macofeat: exclude newer python packages. ..9.
2026-04-09tikafeat: exclude newer python packages. ..11.
2026-04-09lieffeat: exclude newer python packages. ..8.
2026-04-09entrypointcheckfeat: exclude newer python packages. ..8.
2026-04-09index-coincidencefeat: exclude newer python packages. ..7.
2026-04-09malcarvefeat: exclude newer python packages. ..7.
2026-04-09officefeat: exclude newer python packages. ..8.
2026-04-09build-time-stringsfeat: exclude newer python packages. ..7.
2026-04-09capefeat: exclude newer python packages. ..8.
2026-04-09android-parserfeat: exclude newer python packages. ..7.
2026-04-09pdftoolsfeat: exclude newer python packages. ..9.
2026-04-09qrcodefeat: exclude newer python packages. ..7.
2026-04-09lookbackfeat: exclude newer python packages. ..7.
2026-04-09portexfeat: exclude newer python packages. ..7.
2026-04-09unboxfeat: exclude newer python packages. ..11.
2026-04-09script-decoderfeat: exclude newer python packages. ..8.
2026-04-09truncatedfeat: exclude newer python packages. ..8.
2026-04-09shortcutfeat: exclude newer python packages. ..7.
2026-04-09suricatafeat: exclude newer python packages. ..7.
2026-04-09repeated-bytesfeat: exclude newer python packages. ..7.
2026-04-09yarafeat: exclude newer python packages. ..8.
2026-04-09richidfeat: exclude newer python packages. ..7.
2026-04-09retrohuntfeat: exclude newer python packages. ..19.
2026-04-08retrohuntfeat: timing for retrohunt using Prometheus ..10.
2026-04-02goinfofeat: remove go private. ..15.
2026-04-02entropyfeat: remove go private. ..15.
2026-04-02virustotalfeat: remove go private. ..19.
2026-03-30retrohuntfix: templateResponse funciton now requires keyword arguments ..18.
2026-03-23virustotalfeat: try and force major updates to update p
2026-03-20alphabetsfeat: include offset and size of alphabet ..10.
2026-03-19officefeat: upgrade file to 47 ..6.
2026-03-16retrohuntfeat: fixed worker not gettings stale jobs ..11.
2026-03-15pythonfix: remove debugging print statements. ..8.
2026-03-13pythonfeat: prevent un.necessary reads into memory ..9.
2026-03-13virustotalfeat: upgrade bedrock to version 11. ..8.
2026-03-13goinfofeat: upgrade bedrock to version 11. ..9.
2026-03-13entropyfeat: upgrade bedrock to version 11. ..8.
2026-03-11retrohuntfeat: replace dispatcher and kafka with redis ..8.
2026-03-10netinfofeat: add ja4 ..6.
2026-03-09virustotalfeat: upgrade golang to 1.26 ..7.
2026-03-09goinfofeat: upgrade golang to 1.26 ..8.
2026-03-09entropyfeat: upgrade golang to 1.26 ..7.
2026-03-06alphabetsfeat: include offset and size of alphabet ..10.
2026-03-06macofix: attempt to fix extractor that needs pkg.resource. ..7.
2026-03-06emailfeat: swap to gpl license v3 ..6.
2026-03-03retrohuntfix: update outdated readme.md ..9.
2026-03-03flossfix: update outdated readme.md ..6.
2026-03-03image-convertfix: update outdated readme.md ..5.
2026-03-03debloatfix: update outdated readme.md ..5.
2026-03-03lieffix: update outdated readme.md ..5.
2026-03-03nsrlfix: update outdated readme.md ..6.
2026-03-03js-deobffix: update outdated readme.md ..5.
2026-03-03capefix: update outdated readme.md ..6.
2026-03-03assemblylinefix: update outdated readme.md ..6.
2026-03-03macofix: update outdated readme.md ..6.
2026-03-03lookbackfix: update outdated readme.md ..5.
2026-03-03exiftoolfix: update outdated readme.md ..5.
2026-03-03malcarvefix: update outdated readme.md ..5.
2026-03-03android-parserfix: update outdated readme.md ..5.
2026-03-03index-coincidencefix: update outdated readme.md ..5.
2026-03-03portexfix: update outdated readme.md ..5.
2026-03-03de4dotfix: update outdated readme.md ..7.
2026-03-03certificatesfix: update outdated readme.md ..5.
2026-03-03emailfix: update outdated readme.md ..5.
2026-03-03alphabetsfeat: switch to uv. ruff and enable ty in audit mode ..8.
2026-03-03export-hashesfix: update outdated readme.md ..5.
2026-03-03dotnet-decompilerfix: update outdated readme.md ..6.
2026-03-03tikafix: update outdated readme.md ..7.
2026-03-03pythonfix: update outdated readme.md ..7.
2026-03-03mandiant-capafix: update outdated readme.md ..6.
2026-03-03repeated-bytesfix: update outdated readme.md ..5.
2026-03-03shortcutfix: update outdated readme.md ..5.
2026-03-03richidfix: update outdated readme.md ..5.
2026-03-03netinfofix: update outdated readme.md ..5.
2026-03-03pdftoolsfix: update outdated readme.md ..7.
2026-03-03script-decoderfix: update outdated readme.md ..6.
2026-03-03qrcodefix: update outdated readme.md ..5.
2026-03-03unboxfix: update outdated readme.md ..7.
2026-03-03yarafix: update outdated readme.md ..5.
2026-03-03entrypointcheckfix: update outdated readme.md ..5.
2026-03-03ghidrafix: update outdated readme.md ..8.
2026-03-03suricatafix: update outdated readme.md ..5.
2026-03-03truncatedfix: update outdated readme.md ..5.
2026-03-03officefix: update outdated readme.md ..5.
2026-03-03build-time-stringsfix: update outdated readme.md ..5.
2026-03-03alphabetsfix: update outdated readme.md ..9.
2026-02-26tikafeat: update test ..6.
2026-02-16retrohuntfix: remove azul security. ..7.
2026-02-12retrohuntfix: bedrock exception import change. ..6.
2026-02-12unboxfeat: remove reliance on pkg.resource ..6.
2026-02-12script-decoderfeat: remove reliance on pkg.resource ..5.
2026-02-12pdftoolsfeat: remove reliance on pkg.resource ..6.
2026-02-03alphabetsfeat: switch to uv. ruff and enable ty in audit mode ..8.
2026-02-03capefeat: switch to uv. ruff and enable ty in audit mode ..5.
2026-02-03assemblylinefeat: switch to uv. ruff and enable ty in audit mode ..5.
2026-02-03build-time-stringsfeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03android-parserfeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03alphabetsfeat: switch to uv. ruff and enable ty in audit mode ..8.
2026-02-03flossfeat: switch to uv. ruff and enable ty in audit mode ..5.
2026-02-03dotnet-deobfeat: switch to uv. ruff and enable ty in audit mode ..6.
2026-02-03js-deobffeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03de4dotfeat: switch to uv. ruff and enable ty in audit mode ..6.
2026-02-03entrypointcheckfeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03dotnet-decompilerfeat: switch to uv. ruff and enable ty in audit mode ..5.
2026-02-03netinfofeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03emailfeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03exiftoolfeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03ghidrafeat: switch to uv. ruff and enable ty in audit mode ..7.
2026-02-03debloatfeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03pythonfeat: switch to uv. ruff and enable ty in audit mode ..6.
2026-02-03mandiant-capafeat: switch to uv. ruff and enable ty in audit mode ..5.
2026-02-03export-hashesfeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03index-coincidencefeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03lieffeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03retrohuntfix: additional lint changes. ..5.
2026-02-03image-convertfeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03nsrlfeat: switch to uv. ruff and enable ty in audit mode ..5.
2026-02-03portexfeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03pdftoolsfeat: switch to uv. ruff and enable ty in audit mode ..5.
2026-02-03richidfeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03lookbackfeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03officefeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03macofeat: switch to uv. ruff and enable ty in audit mode ..5.
2026-02-03malcarvefeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03qrcodefeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03alphabetsfeat: fix linting ..7.
2026-02-03tikafeat: switch to uv. ruff and enable ty in audit mode ..5.
2026-02-03repeated-bytesfeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03unboxfeat: switch to uv. ruff and enable ty in audit mode ..5.
2026-02-03suricatafeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03truncatedfeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03yarafeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-02-03shortcutfeat: switch to uv. ruff and enable ty in audit mode ..4.
2026-01-20entropyfeat: upgrade bedrock. ..6.
2026-01-20goinfofeat: upgrade bedrock to v10.10 ..7.
2026-01-20flossfeat: fix linting ..4.
2026-01-19pythonfeat: fix linting ..5.
2026-01-19mandiant-capafeat: fix linting ..4.
2026-01-19unboxfeat: fix linting ..4.
2026-01-19netinfofeat: fix linting ..3.
2026-01-19suricatafeat: fix linting ..3.
2026-01-19macofeat: fix linting ..4.
2026-01-19image-convertfeat: fix linting ..3.
2026-01-19js-deobffeat: fix linting ..3.
2026-01-19retrohuntfeat: fix linting ..3.
2026-01-19dotnet-deobfeat: fix linting ..5.
2026-01-19pdftoolsfeat: fix linting ..4.
2026-01-19richidfeat: fix linting ..3.
2026-01-19nsrlfeat: fix linting ..4.
2026-01-19tikafeat: fix linting ..4.
2026-01-19debloatfeat: fix linting ..3.
2026-01-19ghidrafeat: fix linting ..6.
2026-01-19lieffeat: fix linting ..3.
2026-01-19script-decoderfeat: fix linting ..3.
2026-01-19exiftoolfeat: fix linting ..3.
2026-01-19portexfeat: fix linting ..3.
2026-01-19officefeat: fix linting ..3.
2026-01-19shortcutfeat: fix linting ..3.
2026-01-19yarafeat: fix linting ..3.
2026-01-19malcarvefeat: fix linting ..3.
2026-01-19repeated-bytesfeat: fix linting ..3.
2026-01-19de4dotfeat: fix linting ..5.
2026-01-19lookbackfeat: fix linting ..3.
2026-01-19entrypointcheckfeat: fix linting ..3.
2026-01-19build-time-stringsfeat: fix linting ..3.
2026-01-19truncatedfeat: fix linting ..3.
2026-01-19alphabetsfeat: fix linting ..7.
2026-01-19index-coincidencefeat: fix linting ..3.
2026-01-19qrcodefeat: fix linting ..3.
2026-01-14assemblylinefeat: remove file.format.legacy. ..3.
2026-01-14virustotalfeat: remove file.format.legacy. ..6.
2025-12-18goinfofeat: upgrade bedrock to v10 ..6.
2025-12-18virustotalfeat: upgrade bedrock to v10 ..5.
2025-12-18entropyfeat: upgrade bedrock to v10 ..5.
2025-12-16flossfix: no pyinstaller flare.floss ..3.
2025-12-16entropyfeat: upgrade bedrock. ..4.
2025-12-16virustotalfeat: upgrade bedrock. ..4.
2025-12-16goinfofeat: upgrade bedrock. ..5.
2025-12-09ghidrafeat: upgrade ghidra to version 12. ..5.
2025-12-09mandiant-capafeat: upgrade flare capa to version 9.3.1. ..3.
2025-12-02tikafix: better support for larger Tika content ..3.
2025-11-26dotnet-deobfeat: add link to fork. ..4.
2025-11-25alphabetsfix: mirroring ..5.
2025-11-25alphabetsfix: mirroring ..5.
2025-11-25alphabetsfix: mirroring ..5.
2025-11-24dotnet-deobfeat: upgrade debian to 13. ..3.
2025-11-24dotnet-decompilerfeat: upgrade to dotnet 10. ..3.
2025-11-24pythonfeat: merge and rename plugins. ..3.
2025-11-24de4dotfeat: upgrade de4dot to dotnet 8 ..4.
2025-11-24unboxfeat: remove python related multi.plugins ..3.
2025-11-19macofeat: Allow maco config features on children ..3.
2025-11-18export-hashesfeat: add mirroring pipeline. ..2.
2025-11-18mandiant-capafeat: add mirroring pipeline. ..2.
2025-11-18assemblylinefeat: add mirroring pipeline. ..2.
2025-11-18dotnet-deobfeat: add mirroring pipeline. ..2.
2025-11-18malcarvefeat: add mirroring pipeline. ..2.
2025-11-18lieffeat: add mirroring pipeline. ..2.
2025-11-18js-deobffeat: add mirroring pipeline. ..2.
2025-11-18de4dotfeat: add mirroring pipeline. ..3.
2025-11-18debloatfeat: add mirroring pipeline. ..2.
2025-11-18emailfeat: add mirroring pipeline. ..2.
2025-11-18flossfeat: add mirroring pipeline. ..2.
2025-11-18tikafeat: add mirroring pipeline. ..2.
2025-11-18image-convertfeat: add mirroring pipeline. ..2.
2025-11-18entrypointcheckfeat: add mirroring pipeline. ..2.
2025-11-18lookbackfeat: add mirroring pipeline. ..2.
2025-11-18index-coincidencefeat: add mirroring pipeline. ..2.
2025-11-18certificatesfeat: add mirroring pipeline. ..2.
2025-11-18dotnet-decompilerfeat: add mirroring pipeline. ..2.
2025-11-18retrohuntfeat: add mirroring pipeline. ..2.
2025-11-18python-decompilerfeat: add mirroring pipeline. ..2.
2025-11-18android-parserfeat: add mirroring pipeline. ..2.
2025-11-18entropyfeat: add mirroring pipeline. ..3.
2025-11-18pdftoolsfeat: add mirroring pipeline. ..3.
2025-11-18build-time-stringsfeat: add mirroring pipeline. ..2.
2025-11-18netinfofeat: add mirroring pipeline. ..2.
2025-11-18repeated-bytesfeat: add mirroring pipeline. ..2.
2025-11-18truncatedfeat: add mirroring pipeline. ..2.
2025-11-18shortcutfeat: add mirroring pipeline. ..2.
2025-11-18officefeat: add mirroring pipeline. ..2.
2025-11-18unboxfeat: add mirroring pipeline. ..2.
2025-11-18suricatafeat: add mirroring pipeline. ..2.
2025-11-18nsrlfeat: add mirroring pipeline. ..3.
2025-11-18macofeat: add mirroring pipeline. ..2.
2025-11-18script-decoderfeat: add mirroring pipeline. ..2.
2025-11-18goinfofeat: add mirroring pipeline. ..4.
2025-11-18qrcodefeat: add mirroring pipeline. ..2.
2025-11-18yarafeat: add mirroring pipeline. ..2.
2025-11-18virustotalfeat: add mirroring pipeline. ..3.
2025-11-18alphabetsfix: mirroring ..5.