- remove
export-to-jbxviewparameter - add
url-reputationswitch to the command line interface - add
powershell-loggingparameter - remove
live-interactionparameter
- Add
joelab_images_captureendpoint for capturing new images. - Use
python3interpreter when called as a CLI
- Fix
joelab_images_listandjoelab_images_resetfunctions
- Added
disable-chained-runsparameter
- Added command line submission type
- Removed
static-onlyparameter - Renamed
remote assistancetolive interaction
- Updated the API documentation.
- Removed the
static-onlyparameter.
- Removal of
remote-assistance-view-only.
- Add submission parameter
priorityfor on-premise installations.
- Add parameter
include_sharedtosubmission/listendpoint.
- Add parameter for choosing the browser.
- Fix Joe Lab file upload.
- Deprecate parameter "anti-evasion-date"
- Add parameter "system-date"
- Joe Lab file upload uses chunked submissions now.
- Improve submission code to upload large samples through chunked upload.
- Add
submission/listendpoint to CLI and API.
- Fix
joelab network updateCLI command. - Add
joelab pcapcommands to the API and the CLI.
- Add
account infocommand to CLI.
- In version 3.7, the CLI did not check the certificates unless
--no-check-certificatewas enabled. - Documentation fix for
Joe.joelab_images_reset
- Implementation of the Joe Lab API
- New dotnet-tracing parameter.
- Renamed
office-files-passwordtodocument-password - Help message improvements
- CLI gets new
--no-check-certificateflag for easier integration in test environments.
Support environmental variables for the server settings. The variables are:
| variable | description |
|---|---|
JBX_API_KEY |
Sets the api key |
JBX_API_URL |
Sets the api url |
JBX_ACCEPT_TAC=1 |
Accept the terms and conditions (Cloud only) |
These environmental variables work in both the API and CLI interface. The order of precedence is from least to most important:
- variables defined directly in the Python script
- environmental variables
- arguments passed as an argument (API) or parameter (CLI)
Support for the new submission option encrypt-with-password and for downloading encrypted analyses.
The decryption happens transparently.
- CLI has a new option
--encrypt-with-passwordfor submissions. - CLI can specify
--passwordwhen downloading resources - The API
JoeSandbox.analysis_download()has a new argumentpassword.
Add --ignore-errors flag to the "analysis download" command.
Add compatibility with urllib3 < 1.25.2 to avoid dependency issues.
The constructor of JoeSandbox gains a new argument user_agent. When you develop an integration
with Joe Sandbox, please specify the name of the integration.
Small fix.
Update dependencies to requests 2.22.0 and urllib 1.25.2. This allows uploading files with non-ascii names. Closes issue #10.
Python 3.4 is no longer supported.
Fix the command line for analysis report and analysis download.
- Add
JoeSandbox.analysis_list_paged(). Use this new method for iterating over large numbers of analyses.
We have added "Submission" as a new entity to our object model. Each submission can result in one or more analyses, which is especially relevant for emails and archives. Therefore, submissions are now the main endpoint to communicate with.
jbxapi.py now uses /api/v2/submission/new instead of /api/v2/analysis/submit
which results in some breaking changes.
Changes to Python class JoeSandbox:
| Old | New |
|---|---|
def submit_sample |
Returns a submission id instead of multiple webids |
def submit_url |
Returns a submission id instead of multiple webids |
def submit_cookbook |
Returns a submission id instead of multiple webids |
def info |
def analysis_info |
def delete |
def analysis_delete |
def list |
def analysis_list |
def search |
def analysis_search |
def download |
def analysis_download |
def systems |
def server_systems |
| new | def submission_info |
| new | def submission_delete |
def server_keyboard_layouts |
def server_languages_and_locales |
Changes to the Command Line Interface:
| Old | New |
|---|---|
jbxapi submit |
Returns a submission id instead of multiple webids |
jbxapi info |
jbxapi analysis info |
jbxapi delete |
jbxapi analysis delete |
jbxapi list |
jbxapi analysis list |
jbxapi search |
jbxapi analysis search |
jbxapi download |
jbxapi analysis download |
jbxapi report |
jbxapi analysis report |
jbxapi systems |
jbxapi server systems |
| new | jbxapi submission info |
| new | jbxapi submission delete |
jbxapi server_keyboard_layouts |
jbxapi server languages_and_locales |
We recommend switching to the new submissions API and CLI.
The script prints API errors to stdout instead of stderr. The previous distinction
did not make any sense since humans easily recognize error messages and machines
can simply check the exit code of the script.
- We removed some old, deprecated settings.
- The script sends its version inside the user-agent header to the server.