Commit Graph

443 Commits (093b24f6aad6c06933ad634204bca6be178d36da)

Author SHA1 Message Date
chrisr3d 4f4fe45633
fix: [stix2 export] Fixed attribute counting on restSearch 2019-02-02 12:09:52 +01:00
iglocska 4dd53eb8e3 fix: [freetext import] Handle cases where a value can be both a hash and a btc address better 2019-01-22 08:58:02 +01:00
iglocska a9a47fb46c new: [cache export] Added the includeEventUuid flag to the output 2019-01-17 15:04:01 +01:00
Daniel Roethlisberger 5b4079637a new: [attributes] Add cdhash attribute, 40+ digit hash, default Payload delivery, ids=1 (#3965) 2018-12-19 20:19:49 +01:00
chrisr3d 87190f6510
fix: [restSearch] Using the correct python version to call STIX scripts
- Using the correct python defined in virtual env,
  if available, and the default global python3
  otherwise
2018-12-07 15:31:04 +01:00
Anthony Vaccaro eab6ca62e3 fix typo in called method name 2018-11-27 10:02:25 +10:00
iglocska db5d61725a chg: [bro] Preparation for the move to restsearch
- also fixed some edge-case issues
2018-11-24 21:35:50 +01:00
iglocska 86a27e7c31 fix: [CSV] Fixed some defaults for the CSV export 2018-11-23 13:47:06 +01:00
iglocska a28909d366 new: [freetext] Added BTC recognition, fixes #3864 2018-11-13 12:06:00 +01:00
iglocska ce3c78cd7d Merge branch 'sighting_api' into 2.4 2018-10-29 20:20:17 +01:00
iglocska bbc8a8bf4d fix: [API] minor fixes to the sightings api
- fixed duplicate sighting tags in XML output
- added attribute value to the sighting
2018-10-29 20:18:29 +01:00
Hannah Ward 608ddaa969
fix: aws would error if asked to del non-existing 2018-10-26 11:01:44 +01:00
Sami Mokaddem ff5f5faf02 new: [sighting/api] xml output format + improved error feedback 2018-10-23 13:06:37 +02:00
Sami Mokaddem 01cba114f2 fix: [sightings/api] now support json output format 2018-10-23 12:17:54 +02:00
Sami Mokaddem 99e5f560a8 new: [sighting/api] trying to follow the new API architecture. JSON
export is broken but CSV is working. WIP...
2018-10-23 11:24:03 +02:00
iglocska 1187fb2a27 new: [API] Added CSV as return format for event index 2018-10-21 22:47:22 +02:00
www-data f9183dee3b Merge branch '2.4' into py-virtualenv 2018-10-15 17:09:18 +09:00
iglocska 158d0580b3 new: [API] Added a new export that simply hashes all values with a requested hash format 2018-10-09 11:21:35 +02:00
iglocska 40b1a4a271 chg: [CSV] Added timestamp in CSV output with include context on the event level 2018-10-08 21:43:23 +02:00
Steve Clement e26e4a2e92 Merge branch '2.4' into py-virtualenv 2018-10-08 07:45:04 +08:00
iglocska abc83000c0 fix: [CSV] boolean fields should be set to 1/0 instead of true/false 2018-10-06 18:59:24 +02:00
chrisr3d 69c4b58638 Merge branch '2.4' of github.com:MISP/MISP into 2.4 2018-10-05 14:59:33 +02:00
chrisr3d a42b3ab756
fix: [restSearch] Avoiding useless stix python script calls on empty files 2018-10-05 14:58:39 +02:00
iglocska 77258728ee Merge branch '2.4' of github.com:MISP/MISP into 2.4 2018-10-05 14:50:33 +02:00
iglocska 1c8b17416f chg: [API] made the CSV export type less restrictive by default (to_ids / published ignored by default) 2018-10-05 14:49:12 +02:00
chrisr3d d65482c297
fix: [restSearch] Ignoring square brackets around STIX2 objects returned by the python script
Because they are already provided by the framing script
2018-10-05 10:28:48 +02:00
chrisr3d 09a138fd38 Merge branch '2.4' of github.com:MISP/MISP into chrisr3d_restSearch_tests 2018-10-04 23:09:11 +02:00
chrisr3d 445bd0c84c
add: [restSearch] STIX 1 & 2 export for restSearch
Features to be merged:
- Export of multiple MISP events
- Fetching events and writing them into files, each
  file containing at most a number of attributes
  defined by a limit
- Each file is then parsed instead of parsing each
  event individualy, which reduces the number of
  times the python scripts are called, reducing
  the execution time of the overall process
- The result is then returned as on single file
  read and displayed
2018-10-04 22:11:30 +02:00
chrisr3d 54b90cf8f5
fix: [restSearch] Changed how data is handled eeeeeeeeeee
- Criteria was number of events and is now number
  of attributes
- Writing data in a file until the limit number of
  attributes is reached, then writing in the next
  file and looping again until all data is written
- Then for each file, calling the python script to
  parse MISP events and translate them into STIX
- Writing parsed STIX data into 1 file used to
  return the result
2018-10-04 11:40:45 +02:00
iglocska e461029b9d new: [API] CSV export tool completely reworked 2018-10-03 07:59:46 +02:00
Steve Clement a699c5fcd4 Merge branch '2.4' into py-virtualenv 2018-10-02 20:55:46 +08:00
chrisr3d 5a87b64c74
Merge branch '2.4' of github.com:MISP/MISP into chrisr3d_restSearch_tests 2018-10-02 13:35:21 +02:00
iglocska 58b9a3c50b fix: [graph] Made the correlation graph aware of the new correlation loading 2018-10-02 07:35:34 +02:00
chrisr3d d6595e00c6
wip: [restSearch] Passing multiple events to the STIX parsing script
- atm calling the python script every 10 events
  fetched with fetchEvent
2018-09-30 20:32:38 +02:00
chrisr3d 4ac455d7c4 Merge branch '2.4' of github.com:MISP/MISP into chrisr3d_restSearch_tests 2018-09-29 19:20:19 +02:00
Steve Clement df3d87b5c8 Merge branch '2.4' into py-virtualenv 2018-09-28 15:00:46 +02:00
Steve Clement 05e0c412ef chg: [fix] Some fixed to the python virtualenv tweaks 2018-09-28 14:58:55 +02:00
Sami Mokaddem b66eeefffa fix: [eventGraph] prevents bug if object has no attributes 2018-09-28 12:05:46 +02:00
iglocska 46cb19df2d Merge branch '2.4' of github.com:MISP/MISP into 2.4 2018-09-28 09:24:40 +02:00
iglocska cfe86512a2 fix: [API] Fixed an invalid lookup in the openioc export 2018-09-27 23:02:59 +02:00
chrisr3d 72c0aa9987
fix: [restSearch] Prettifying stix packages with indents
- As it is in stix export function from Model/Event.php
2018-09-27 12:03:49 +02:00
chrisr3d aa69d6ca1a
fix: [cleanup] Fixed indentation in restSearch 2018-09-25 20:33:41 +02:00
chrisr3d 52115cdf85
fix: Added variable to have attribute with no ids flag from fetchEvent 2018-09-25 20:13:20 +02:00
chrisr3d 8a4911d18c
fix: [restSearch] Fixed variables & indent 2018-09-25 12:10:39 +02:00
chrisr3d 933af46dfb
wip: [restSearch] Stix1 export for restSearch 2018-09-24 14:52:33 +02:00
iglocska cefab3e01c new: [freetext import] Added detection for AS 2018-09-23 11:43:55 +02:00
iglocska 48c6150257 new: [Complex type tool] Detection of [1] style refanging 2018-09-21 15:08:33 +02:00
iglocska 2e7dfc9273 new: [API] Correctly handle objects in flat exports and exposed text export to event level search 2018-09-14 14:34:01 +02:00
iglocska 51b3ef61dd new: [API] Added the includeEventTags parameter to the /attributes/restSearch API
- appends all event level tags to each attribute
2018-09-09 16:49:59 +02:00
iglocska f995b561fb Merge branch '2.4' of github.com:MISP/MISP into 2.4 2018-09-09 00:25:28 +02:00