MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

chg: [galaxy:export] Started conversion tool to misp-galaxy format - WiP

pull/6120/head
mokaddem 2020-11-10 10:16:20 +01:00
parent beaf9ce281
commit ac7eeda6c3
No known key found for this signature in database
GPG Key ID: 164C473F627A06FA
3 changed files with 65 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
app/Controller/GalaxiesController.php
View File

@ -248,6 +248,9 @@ class GalaxiesController extends AppController
);
$clusters = $this->Galaxy->GalaxyCluster->fetchGalaxyClusters($this->Auth->user(), $options, $full=true);
$clusters = $this->Galaxy->GalaxyCluster->unsetFieldsForExport($clusters);
if ($this->request->data['format'] == 'misp-galaxy') {
$clusters = $this->Galaxy->convertToMISPGalaxyFormat($galaxy, $clusters);
}
$content = json_encode($clusters, JSON_PRETTY_PRINT);
$this->response->body($content);
$this->response->type('json');

60
app/Model/Galaxy.php
View File

@ -689,4 +689,64 @@ class Galaxy extends AppModel
));
return $tree;
}
/**
* convertToMISPGalaxyFormat
*
* @param array $galaxy
* @param array $clusters
* @return array the converted clusters into the misp-galaxy format
*
* Omitted keys in root JSON key as useless:
* - authors (since all clusters have their own)
* - category (not used)
* - description (not used as the description in the galaxy.json is used instead)
* - source (since all clusters have their own)
* - uuid (root level uuid key seems to be the collection_uuid in each clusters)
* - version (root level version is not in sync with galaxy version)
*
* Should the values be sorted?
*/
public function convertToMISPGalaxyFormat($galaxy, $clusters)
{
$converted = [];
// $converted['category'] = $galaxy['Galaxy'];
// $converted['description'] = $galaxy['Galaxy'];
// $converted['source'] = $galaxy['Galaxy'][''];
// $converted['uuid'] = $galaxy['Galaxy'][''];
// $converted['version'] = $galaxy['Galaxy'][''];
$converted['name'] = $galaxy['Galaxy']['name'];
$converted['type'] = $galaxy['Galaxy']['type'];
$values = [];
$fieldsToSave = ['description', 'uuid', 'value'];
foreach ($clusters as $i => $cluster) {
foreach ($fieldsToSave as $field) {
$values[$i][$field] = $cluster['GalaxyCluster'][$field];
}
foreach ($cluster['GalaxyCluster']['GalaxyElement'] as $element) {
if (isset($values[$i]['meta'][$element['key']])) {
if (is_array($values[$i]['meta'][$element['key']])) {
$values[$i]['meta'][$element['key']][] = $element['value'];
} else {
$values[$i]['meta'][$element['key']] = [$values[$i]['meta'][$element['key']], $element['value']];
}
} else {
$values[$i]['meta'][$element['key']] = $element['value'];
}
}
foreach ($cluster['GalaxyCluster']['GalaxyClusterRelation'] as $j => $relation) {
$values[$i]['related'][$j] = [
'dest-uuid' => $relation['referenced_galaxy_cluster_uuid'],
'type' => $relation['referenced_galaxy_cluster_type'],
];
if (!empty($relation['Tag'])) {
foreach ($relation['Tag'] as $tag) {
$values[$i]['related'][$j]['tags'][] = $tag['name'];
}
}
}
}
$converted['values'] = $values;
return $converted;
}
}

4
app/View/Galaxies/export.ctp
View File

@ -30,10 +30,10 @@ echo $this->element('genericElements/Form/genericForm', array(
'type' => 'radio',
'legend' => __('Export format'),
'options' => array(
'misp' => sprintf('<b>%s</b>: %s', __('MISP Format'), __('To re-import to another MISP')),
'misp' => sprintf('<b>%s</b>: %s', __('MISP Format'), __('To re-import in another MISP')),
'misp-galaxy' => sprintf('<b>%s</b>: %s', __('misp-galaxy format'), __('Usable to be integrated into the official repository')),
),
'default' => 'raw',
'default' => 'misp',
),
'<br />',
array(