AIL Framework Release: v6.7 - The Improved Search Interface

Mar 12, 2026 • AIL Project Team

AIL Framework Release: v6.7

Release Date: March 12, 2026
Theme: Unified Search Architecture & Enhanced Investigation Workflows

🔍 The Improved Search Interface

We have completely redesigned the search experience to provide a more cohesive and powerful discovery tool.

  • Unified Search Interface: No more jumping between fragmented search modules. All core search capabilities are now centralized into a single, user-friendly interface.
  • Intelligent Sorting: You can now toggle results between Best Match (relevancy) and Most Recent (chronology) to better suit your analysis needs.
  • Date Range Filtering: Quickly narrow down results with the new integrated date range picker.
  • Advanced Search: While most queries are now unified, the Advanced Search remains available for specialized data types requiring granular control.

Screenshot from 2026-03-12 13-48-31

⚠️ IMPORTANT: Action Required for Meilisearch

Warning: To support the new unified search schema, Meilisearch indexes created with AIL versions before v6.7 will be automatically removed during the update.

Action: Users must rebuild their indexes after the update to re-populate them using the new architecture.

🛠️ Investigations & Tracking Improvements

  • Status Tracking: Added viewed, done, and rejected (false positive) statuses for objects in both Retro Hunt and Tracker modules.
  • Streamlined Workflows: * Create a Retro Hunt directly from a Tracker (available for YARA types).
    • Download investigation objects directly (with improved .gz extension handling).
  • Refactored Dashboard: The object dashboard has been redesigned and now includes a dedicated Investigations section.
  • Correlation Graph: Added “Show Direct Correlations (Level 0)” buttons; the engine now prioritizes loading direct correlations first for better visibility.

📡 Feeders & Crawlers

  • Onion Lookup Security: Enhanced privacy by hiding titles from unsafe domains and stripping non-onion strings from results.
  • Crawler Stability: Implemented a domhash extraction timeout to prevent performance issues on malformed HTML.
  • Chat Feeders: Added the ability to remove chat objects and introduced more flexible iteration options for chat sources.

🐞 Key Bug Fixes

  • Chat Correlation: Fixed an issue where Channel IDs interfered with Message IDs, resolving broken UI links.
  • PDF Handling: Resolved translation bounding box overlaps and fixed a bug where the “View PDF” button wouldn’t appear when multiple PDFs shared a filename.
  • System Stability: Fixed a Flask 500 error in the logger for unauthenticated users and corrected various extractor UUID issues.

For technical support or detailed migration steps regarding the Meilisearch rebuild, please refer to the official AIL documentation.

Join the AIL Team at Hackathon.lu!

Want to help shape the future of the project? The AIL core team will be at Hackathon.lu on April 14th & 15th, 2026 in Luxembourg.

Come hack with us, share your feedback on v6.7, and collaborate on the next generation of analysis tools. Whether you are a contributor or a power user, we’d love to see you there!

Funding 🇪🇺

AIL is developed and maintained with the support of the European Union as part of the HOPLITE European Project.
HOPLITE aims to strengthen the capacity of law enforcement authorities to gather, analyse, and share open-source and closed-source intelligence, integrating AI-driven analysis to enhance real-time threat detection and response workflows. The project builds on previous EU-funded initiatives and enhances key components such as AIL and MISP to deliver scalable, responsible, and actionable threat intelligence capabilities for cybersecurity and public safety across EU Member States.

Law enforcement agencies willing to discover and leverage the MISP/AIL-LEA platforms can apply on the misp-lea.org website.

EU logo

Follow us