Alexandre Dulaunoy
ee9107cc1f
MISP taxonomies sub-module updated
2016-01-15 10:36:21 +01:00
Iglocska
b25ca97c46
taxonomies update
2015-12-18 17:45:44 +01:00
Iglocska
1328d83fe5
Updated taxonomies
2015-11-25 15:43:45 +01:00
iglocska
b5857696e9
Update to the Taxonomies
2015-11-24 12:02:39 +01:00
iglocska
3784209cf5
First bash at Taxonomies
...
What works:
- added submodules for taxonomies
- added import tool for taxonomies
- added models and convenience functions for taxonomies
- site admins can update taxonomy libraries
- list taxonomies / view indvidual ones (with all resolved tags)
- create tags manually if a taxonomy is enabled
- view related tags / events quickly from the Taxonomy view
What doesn't work:
- Users still cannot choose a tag from taxonomy lists (this will be the main functionality)
- Feature cannot be disabled
2015-11-24 03:27:14 +01:00
Iglocska
8685e93e22
Merge branch 'master' into feature/sg
...
Conflicts:
VERSION.json
app/Model/Tag.php
app/files/scripts/misp2stix.py
2015-09-02 10:26:56 +02:00
Richard van den Berg
2eddbb5dcc
Export MISP tags as STIX journal entries
2015-08-31 12:55:42 +02:00
Iglocska
47cc0e4d18
Merge branch 'master' into feature/sg
...
Conflicts:
VERSION.json
app/Model/Attribute.php
app/Model/Event.php
2015-07-22 18:04:02 +02:00
Richard van den Berg
0b7df293ea
Convert tab to spaces
2015-07-16 18:05:41 +02:00
Richard van den Berg
93c1849780
Remove unused relatedTTP
2015-07-16 18:04:39 +02:00
Richard van den Berg
b126db534a
Add timezone +00:00 to timestamp
2015-07-16 17:56:52 +02:00
Richard van den Berg
27d09b4e22
Change incident description to title
2015-07-16 17:53:49 +02:00
Richard van den Berg
2e1864f28d
Add Indicated_TTP
2015-07-16 17:49:51 +02:00
Richard van den Berg
ab2aeeb868
Add Valid_Time_Position
2015-07-16 12:55:20 +02:00
Richard van den Berg
f68bd3f785
Add indicator types
2015-07-16 12:36:42 +02:00
Richard van den Berg
c15a178013
Add condition attributes
2015-07-15 17:10:55 +02:00
Iglocska
0481e6eb02
Merge branch 'master' into feature/sg
...
Conflicts:
VERSION.json
app/Controller/ServersController.php
app/Controller/ShadowAttributesController.php
app/Controller/UsersController.php
app/Model/Event.php
app/webroot/js/ajaxification.js
2015-06-29 14:27:16 +02:00
Iglocska
3f215743f0
Complete rework of the ZeroMQ implementation
...
- python server running in the background doing the publishing
- MISP -> python script communication via redis
- configurable / controllable via the admin UI
2015-06-29 08:56:45 +02:00
Iglocska
c73f71f243
Merge branch 'master' into feature/sg
...
The merging is complete
Conflicts:
VERSION.json
app/Console/Command/ServerShell.php
app/Controller/AppController.php
app/Controller/AttributesController.php
app/Controller/EventsController.php
app/Controller/PostsController.php
app/Controller/UsersController.php
app/Model/Attribute.php
app/Model/Event.php
app/Model/Log.php
app/Model/Server.php
app/Model/User.php
app/View/Elements/side_menu.ctp
app/View/Users/admin_index.ctp
app/webroot/js/ajaxification.js
2015-06-10 22:54:20 +02:00
Iglocska
707140243a
Updated the documentation to reflect the correct STIX / CyBox versions required
...
- Updated the admin tool to check the STIX / Cybox versions
2015-06-10 12:47:00 +02:00
Iglocska
1e3db8a8ba
Further work on the new version
...
- org checks fixed in a lot of places
- fixed the searches to work with the new organisations
2015-04-14 17:51:38 +02:00
Iglocska
c2d5a5f1fc
Merge branch 'stix_no_random_ids' into hotfix-2.3.59
2015-04-08 22:30:39 +02:00
Richard van den Berg
7f201fdf81
Consistent timestamps for STIX objects
2015-03-05 13:26:13 +01:00
Richard van den Berg
2a56a00e88
Consistent id's for malware-sample artifacts
2015-03-04 17:28:44 +01:00
Richard van den Berg
bff42361ef
Consistent id's for observable compositions
2015-03-04 17:07:32 +01:00
Richard van den Berg
a4fd3b957a
Use property class name in object ID
2015-02-25 09:50:00 +01:00
Richard van den Berg
8b89caf5b9
Use attribute uuid for cybox id's
2015-02-24 18:02:51 +01:00
Richard van den Berg
d2556ff91d
Use org name and baseurl in XML namespace for STIX
2015-02-19 15:46:54 +01:00
Richard van den Berg
c9bd754adc
More informative CIQ titles
2015-02-19 15:46:45 +01:00
Richard van den Berg
3c205c66f7
More informative STIX titles
2015-02-19 15:46:34 +01:00
iglocska
be0fbfd108
Merge branch 'RichieB2B-ncsc-nl/stix_indicator_comments' into hotfix-2.3.41
2015-02-02 10:41:28 +01:00
Richard van den Berg
c3615eff32
Pretify some comments
2015-01-29 17:24:44 +01:00
Richard van den Berg
e6e66f3f1c
Fixed typo
2015-01-29 17:21:54 +01:00
Richard van den Berg
883fe07861
Fixed typo
2015-01-29 17:20:57 +01:00
Richard van den Berg
0aa09fec4d
Fix string assignments to StructuredText
2015-01-29 17:19:10 +01:00
Richard van den Berg
09511986e7
Map most MISP attribute comments into STIX
2015-01-28 17:48:11 +01:00
Richard van den Berg
05cfbde5e7
Export md5 hashes without file name in STIX
2015-01-27 09:58:13 +01:00
Richard van den Berg
728e8cd29e
Preserve indicator comments in STIX export
2015-01-27 09:54:52 +01:00
iglocska
800c550cc9
STIX export now correctly uses a custom namespace instead of the default "example", fixes #301
2014-12-03 16:23:30 +01:00
iglocska
1346f7e931
Fix to an issue with the markings in the STIX export
...
- xpath describing the current node and descendants is incorrect
2014-12-02 16:13:29 +01:00
iglocska
9e8803c6eb
Confidence mapping changed to boolean in stix export, fixes #326
2014-11-25 13:37:22 +01:00
iglocska
a98dd9b489
Fix to the STIX export fixes #311 and a temporary fix to an OpenIOC import issue
...
- STIX export had 2 issues as pointed out by RichieB2B:
- Incorrect name assigned to incidents due to copy-pasta fail
- Historyitems incorrectly handled
- For the OpenIOC import:
- Mapping DnsEntryItem/Host to hostname
- Mapping of hostnames to Network activity failed due to incorrect capitalistion
- Temporarily removed the ignore function on certain indicators. Ignoring an element in an AND-ed branch happens without a pruning of the element IDs
2014-10-30 10:30:55 +01:00
iglocska
15fa296fdb
Update to the terms and conditions
...
- use terms file as before if nothing else specified
- specify a file in the app/files/terms directory via the server settings tool
- specify whether to show it inline or create a download link for users instead
- by default everything is the same as before, except that the MISP installation path is no longer exposed by a non-existing terms file
2014-10-28 15:11:40 +01:00
iglocska
4fec5d041f
Added missing empty file
2014-10-23 15:59:38 +02:00
iglocska
34cc73b21a
Several changes for the diagnostic tool
...
- Added extra diagnostic tools
2014-09-10 16:55:34 +02:00
iglocska
83369da25a
Several fixes including compatibility with the STIX to_xml() performance fix
...
- STIX export performance greatly improved thanks to 84ce8d8be6376797053668d68e1b863713f008dd
- some junk removed
- fixed some minor pagination issues on the event view
- site admin dummy event creator now has target-* type attributes
2014-08-28 14:27:45 +02:00
iglocska
b983147061
Some cleanup
2014-08-01 15:29:16 +02:00
iglocska
167e5e43a3
First version of the STIX export implementation
...
- currently to_xml() has performance issues, if it's not resolved fast, it would be a good idea to move the export to the background workers
- some UI changes
2014-08-01 14:14:20 +02:00
iglocska
7651f95faa
Python scripts to handle the conversion from a MISP JSON event to stix/cybox
2014-07-25 10:47:08 +02:00
iglocska
0873b305a5
Some cleanup
2014-03-11 11:45:40 +01:00