v2.4.1

v2.4.1

Enhancements:

• Added an as_dict property across all Analyzer objects to simplify integration
  with other systems. Returns a dictionary representation of the object or the list.
• New projects attribute on IPAddress and Hostname objects returns list of projects
  that contain that host as an artifact.
• New analyzer.set_project() method on the Analyzer module to set an active project
  by name or guid, and new add_to_project() methods on Analyzer objects to quickly
  add the object to the active project.
• Direct methods on new Project and Artifact objects to directly manipulate monitoring
  status and tags.

Bug Fixes:

• Added missing ArtifactsRequest to package-level imports

v2.4 Analyzer Features

Enhancements:

• Early implementation of exception handling for SSL properties; analyzer.
  AnalyzerError now available as a base exception type.
• SSL certs will now populate their own ip property, accessing the
  SSL history API when needed to fill in the details.
• New iphistory property of SSL certs to support the ip property and
  give direct access to the historial results.
• Used the tldextract Python library to expose useful properties on Hostname
  objects such as tld, registered_domain, and subdomain
• Change default days back for date-aware searches to 90 days (was 30)
• Reject IPs as strings for Hostname objects
• Ensure IPs are used when instantiating IPAddress objects
• Defang hostnames (i.e. analyzer.Hostname('api[.]riskiq[.]net') )
• Support for Articles as a property of Hostnames and IPs, with autoloading
  for detailed fields including indicators, plus easy access to a list of all
  articles directly from analyzer.AllArticles()
• Support for Malware as a property of Hostnames and IPs
• Better coverage of pretty printing and dictionary representation across
  analyzer objects.

Bug Fixes:

• Exception handling when no details found for an SSL certificate.
• Proper handling of None types that may have prevented result caching

RiskIQ Illuminate

Adds support for RiskIQ Illuminate API, specifically Reputation Score, plus a few bug fixes and documentation improvements.

New analyzer module

New object analyzer module to simplify hostname and IP address analysis for the most common security and research use cases. Updated documentation and a new README file.

Updated endpoints

Delivers broad support for the latest RiskIQ PassiveTotal API endpoints, including CLI support, plus code modernization and light refactoring.

Library bundled with output processing

This release is the last production release that will come bundled with the output processors. These processors add too much additional dependencies that are not necessary to run the core calls to PassiveTotal. We will split the output processing into another project.

Install the release by running:

pip install 'passivetotal==1.0.23'