Commit Graph

16 Commits (main)

Author SHA1 Message Date
Alexandre Dulaunoy 0a907bb664
fix: [crawler] sigma: Yaml parser function call updated 2023-02-04 10:19:06 +01:00
Alexandre Dulaunoy 0a3695c5d5
chg: [crawler] misp galaxy more default import 2021-06-01 11:10:50 +02:00
Alexandre Dulaunoy 7dc5691ebc
chg: [crawler/misp-galaxy] add link and crawler import 2021-06-01 08:43:43 +02:00
Alexandre Dulaunoy 285ed78f29
new: [crawler] misp-galaxy crawler added 2021-05-31 22:58:04 +02:00
Alexandre Dulaunoy 7107f549db
new: [crawler] MISP feed importer into CyCAT including misp-tag and mitre-attack-id 2021-05-30 17:22:12 +02:00
Alexandre Dulaunoy e138ab8b15
chg: [doc] README added 2021-05-29 22:01:26 +02:00
Alexandre Dulaunoy 8583f4c0be
new: [doc] MITRE CTI README added 2021-05-29 18:40:33 +02:00
Alexandre Dulaunoy aac9136f86
fix: [bin] unused code removed 2021-05-29 18:37:45 +02:00
Alexandre Dulaunoy e9ea4cb1c0
fix: [import] trailing slash 2021-05-29 18:37:04 +02:00
Alexandre Dulaunoy bd13c3f834
new: [sigma importer] import supported sigma rules in CyCAT
ATT&CK id are extracted from tags
2021-05-29 18:27:56 +02:00
Alexandre Dulaunoy 513ad99b93
new: [api] namespace API access added
You can do queries like:

- http://127.0.0.1:5000/namespace/finduuid/mitre-attack-id/T1589.003

and also list the known namespaces of the CyCAT instance.

curl -X 'GET' \
  'http://127.0.0.1:5000/namespace/getall' \
    -H 'accept: application/json'

and get

[
  "capec",
  "mitre-attack-id"
]
2021-05-29 16:24:30 +02:00
Alexandre Dulaunoy db0c41a2a0
chg: [github] add sigma to be imported 2021-05-29 11:44:07 +02:00
Alexandre Dulaunoy e84dcd98f1
new: [backend] add reference to namespace id towards UUID
Such as CAPEC, MITRE-ATTACK-ID and what ever you like.

Data structure updated and MITRE ATT&CK crawler support
2021-05-29 11:38:41 +02:00
Alexandre Dulaunoy 9ca7ea613f
new: [mitre-cti] sample importer script added 2021-05-28 08:54:13 +02:00
Alexandre Dulaunoy 394d60666a
new: [MITRE CTI] first version of the CTI crawler 2021-05-27 12:49:34 +02:00
Alexandre Dulaunoy afde6eb55f
new: [GitHub] import org, user and repos as organisation and project in CyCAT.org 2021-05-25 11:13:48 +02:00