MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

chg: [events:restSearch] Added `context-markdown` export format

pull/8208/head
Sami Mokaddem 2022-03-09 17:49:34 +01:00
parent f08d29f1e7
commit b6c730f8f4
No known key found for this signature in database
GPG Key ID: 164C473F627A06FA
3 changed files with 71 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
app/Lib/Export/ContextMarkdownExport.php Normal file
View File

@ -0,0 +1,7 @@
<?php
App::uses('ContextExport', 'Export');
class ContextMarkdownExport extends ContextExport
{
public $renderView = 'context_markdown_view';
}

1
app/Model/Event.php
View File

@ -100,6 +100,7 @@ class Event extends AppModel
'attack-sightings' => array('json', 'AttackSightingsExport', 'json'),
'cache' => array('txt', 'CacheExport', 'cache'),
'context' => array('html', 'ContextExport', 'html'),
'context-markdown' => array('txt', 'ContextMarkdownExport', 'md'),
'count' => array('txt', 'CountExport', 'txt'),
'csv' => array('csv', 'CsvExport', 'csv'),
'hashes' => array('txt', 'HashesExport', 'txt'),

63
app/View/Events/module_views/context_markdown_view.ctp Normal file
View File

@ -0,0 +1,63 @@
<?php
$md = [];
$md[] = sprintf('# %s', __('Aggregated context data'));
$md[] = sprintf('## %s', __('Tags and Taxonomies'));
$mdTags = [];
foreach ($tags as $namespace => $entries) {
$mdTags[] = sprintf('#### %s', h($namespace));
if (!empty($entries[0]['Taxonomy']['description'])) {
$mdTags[] = sprintf('*%s*', h($entries[0]['Taxonomy']['description']));
}
foreach ($entries as $entry) {
$taxonomyInfo = [];
if (!empty($entry['TaxonomyPredicate'])) {
$taxonomyInfo[] = sprintf(
' - **%s**: %s',
h($entry['TaxonomyPredicate']['value']),
h($entry['TaxonomyPredicate']['expanded'])
);
}
if (!empty($entry['TaxonomyEntry'])) {
$taxonomyInfo[] = sprintf(
' - **%s**: %s',
h($entry['TaxonomyEntry']['value']),
h($entry['TaxonomyEntry']['expanded'])
);
}
$mdTags[] = sprintf(
'- %s' . PHP_EOL . '%s',
$this->element('tag', ['tag' => $entry]),
implode(PHP_EOL, $taxonomyInfo)
);
}
}
$md[] = implode(PHP_EOL, $mdTags);
$md[] = sprintf('## %s', __('Galaxy Clusters'));
$mdClusters = [];
foreach ($clusters as $tagname => $entries) {
$mdClusters[] = sprintf(
'#### %s %s',
sprintf('<i class="%s"></i>', $this->FontAwesome->getClass($entries[0]['Galaxy']['icon'])),
h($entries[0]['Galaxy']['name'])
);
if (!empty($entries[0]['Galaxy']['description'])) {
$mdClusters[] = sprintf('*%s*', h($entries[0]['Galaxy']['description']));
}
foreach ($entries as $cluster) {
$mdClusters[] = sprintf(
'- *[%s](%s)*' . PHP_EOL . '%s',
h($cluster['GalaxyCluster']['value']),
$baseurl . '/galaxy_clusters/view/' . h($cluster['GalaxyCluster']['id']),
strlen(h($cluster['GalaxyCluster']['description'])) > 300 ?
(substr(h($cluster['GalaxyCluster']['description']), 0, 300) . '...') : h($cluster['GalaxyCluster']['description']),
);
}
}
$md[] = implode(PHP_EOL, $mdClusters);
// $md[] = sprintf('## %s', __('Mitre ATT&CK Matrix'));
// $md[] = $this->element('view_galaxy_matrix', $attackData);
echo implode(PHP_EOL, $md);