AIL Framework version 2.5 released with improved correlation and experimental support for MISP modules
AIL Framework version 2.5 released.
AIL Framework version 2.5 released with correlation and experimental support for MISP modules. The correlation is now improved to add correlation between PGP, cryptocurrencies, pastes, decoded values against any items in AIL framework. The correlation interface has been redesigned to allow filtering per type (pastes, crawled) and also limit the number of correlations. The MISP modules is still very early but the objective is gain from all MISP modules expansion within AIL. We introduced an experimental module to automatically expand BTC transactions from addresses seen in AIL and pivot to new correlations. New roles were added (read_only and users without) to improve the profile of the various AIL users.
The improvements were designed with some requirements from the ENFORCE project to better support law-enforcement usage.