Commit Graph

1226 Commits (2e38015e8eaefd95fc9a3d3eca8640f64100490e)

Author SHA1 Message Date
chrisr3d 12b713af35
fix: [stix2 import] Allowing import of STIX 2.0 documents that have non v4 UUIDs
- Some further operations may be done on those UUIDs later
- Atm, we (at least) avoid loading errors from the stix2 python library
2018-12-11 15:50:14 +01:00
Alexandre Dulaunoy cef0931d46
chg: [misp-galaxy] updated to the latest version 2018-12-11 14:12:21 +01:00
Alexandre Dulaunoy 8982fdac8a
chg: [taxonomies] updated to the latest version 2018-12-09 12:18:30 +01:00
chrisr3d aea66ccac1
fix: [stix import] Fixed missing event fields import
- Such as event info, event date and so on
2018-12-06 14:39:47 +01:00
iglocska 6d6528a4bc fix: [STIX2] fixed stix2 to use the internal original file capture 2018-12-06 12:06:42 +01:00
iglocska 6dfeb8934b Merge branch '2.4' of github.com:MISP/MISP into 2.4 2018-12-06 11:47:55 +01:00
iglocska 211ac07372 fix: [internal] Handle the upload of original versions of ingested files via a helper function instead of leaving it to external tools 2018-12-06 11:47:14 +01:00
chrisr3d 768d87e9de
fix: [stix import] Fixed indicators parsing
- For stix1 generated with MISP
2018-12-06 11:41:30 +01:00
chrisr3d c633fb3c12
fix: [stix import] Made sure the header description value fetching test is working is all cases 2018-12-06 11:40:19 +01:00
chrisr3d 0469b4848d Merge branch '2.4' of github.com:MISP/MISP into 2.4 2018-12-04 12:01:51 +01:00
chrisr3d d7cc403826
fix: [stix import] Fixed header description value fetching
- Again yes, but with the correct test now
2018-12-04 11:59:44 +01:00
Alexandre Dulaunoy ac991483ca
chg: [misp-galaxy] updated to the latest version 2018-12-04 11:26:33 +01:00
chrisr3d b24c204b3a
fix: [stix2 import] Fixed pattern parsing for a specific case 2018-11-30 14:53:16 +01:00
chrisr3d db5d9faa3c
add: [stix2 import] Parsing external standalone ip address observables 2018-11-27 10:30:45 +01:00
chrisr3d e97b8988c1
add: [stix2 import] Importing external standalone ip address patterns 2018-11-26 16:57:46 +01:00
chrisr3d 228ffd82e9
fix: [stix2 import] Function name typo 2018-11-26 16:57:01 +01:00
chrisr3d 00a9a08436
fix: [stix2 import] Handling cases where we have no galaxy 2018-11-26 16:53:08 +01:00
chrisr3d ef242f3eb3
fix: Fixed elements returned by the url object parsing function
- Was raising an unexpected exception in a special
  case, which was skipping the entire object,
  because of a missing element to return
2018-11-26 09:39:33 +01:00
chrisr3d 37d9fcf81b Merge branch '2.4' of github.com:MISP/MISP into 2.4 2018-11-23 16:15:33 +01:00
chrisr3d b755cb8eea
fix: Fixed header description value fetching 2018-11-23 16:15:03 +01:00
Alexandre Dulaunoy af715c7b75
chg: [warninglists] updated to the latest version 2018-11-22 15:50:33 +01:00
Alexandre Dulaunoy 9dbccf81be
chg: [misp-galaxy] updated to the latest version 2018-11-22 15:47:50 +01:00
Alexandre Dulaunoy 978846a78f
chg: [taxonomies] updated to the latest version 2018-11-22 15:47:19 +01:00
Alexandre Dulaunoy 680c6774b5
chg: [misp-objects] updated to the latest version 2018-11-22 15:46:27 +01:00
chrisr3d 51f1e5d6fc
add: [stix2 import] Added new combinaison of external pattern types 2018-11-22 10:15:45 +01:00
chrisr3d 4bcad73c1e Merge branch '2.4' of github.com:MISP/MISP into 2.4 2018-11-19 08:47:20 +01:00
chrisr3d 31fda3c827
fix: [stix import] Fixed uuid fetching 2018-11-19 08:46:31 +01:00
Alexandre Dulaunoy 474b77aff2
chg: [misp-galaxy] updated to the latest version 2018-11-18 06:40:01 +01:00
Alexandre Dulaunoy f1086cd825
chg: [misp-galaxy] updated to the latest version 2018-11-14 20:48:44 +01:00
chrisr3d b4f9603a89
fix: [stix import] Fixed Tags import 2018-11-14 09:22:09 +01:00
chrisr3d 2adef5897c
fix: [stix export] Fixed dictionary update which requires lists and not tuples 2018-11-12 08:02:14 +01:00
chrisr3d 024b329faf Merge branch '2.4' of github.com:MISP/MISP into 2.4 2018-11-09 15:42:01 +01:00
chrisr3d a01a992914
add: [stix2 import] Parsing external process patterns
- Also small update on process mapping since a
  recent update on Process MISP Object includes
  more attribute fields
2018-11-09 15:39:23 +01:00
chrisr3d c090306908
add: [stix2 import] Parsing external network-traffic patterns
- Code duplication is also avoided in attributes
  creation, since the only change is the mapping
  dictionary we can use the same function with
  only that parameter changing instead of having
  the same function multiple times
2018-11-09 15:35:16 +01:00
chrisr3d 8dad1c3c91
add: [stix2 import] Parsing external regkey patterns 2018-11-09 11:06:53 +01:00
chrisr3d 2d72b30fef
fix: [stix2 import] Fixed relationship target uuid 2018-11-09 11:04:04 +01:00
chrisr3d d3ab9fb174
new: [stix2 import] Starting importing external pattern
- Starting with File objects
- Also modified functions to make them reusable
2018-11-09 10:19:28 +01:00
chrisr3d 62985d0640
fix: [cleanup] Updated function names to differentiate observable parsing from the next updates on pattern parsing 2018-11-08 21:24:51 +01:00
Alexandre Dulaunoy 671ff69969
chg: [taxonomies] added the exercise taxonomy from CSIRT network discussions 2018-11-08 14:34:56 +01:00
chrisr3d 94028687cd
chg: [stix2 import] Parsing relationships & importing galaxies in the appropriate level
- Importing Galaxies in attribute level when
  expected by relationships, and possible
- Importing Galaxies as before in event level
  otherwise
2018-11-07 20:28:50 +01:00
Alexandre Dulaunoy 86d6909ade
chg: [taxonomies] updated to the latest version 2018-11-07 14:56:13 +01:00
chrisr3d 22eaaa3497 Merge branch '2.4' of github.com:MISP/MISP into 2.4 2018-11-07 14:46:18 +01:00
chrisr3d 14e314ef7a
fix: [cleanup] Cleaned up STIX 1&2 export scripts 2018-11-07 14:45:29 +01:00
Alexandre Dulaunoy b874f24000
chg: [misp-taxonomies] updated with the new and latest changes 2018-11-07 10:17:03 +01:00
chrisr3d 6afadf1d26 Merge branch '2.4' of github.com:MISP/MISP into 2.4 2018-11-07 09:36:47 +01:00
Christian Studer efe714c7a3
Merge pull request #3852 from RichieB2B/ncsc-nl/fix-stix-cidr
Keep CIDR subnet size in STIX export
2018-11-07 09:32:50 +01:00
chrisr3d 2c57f5f835
fix: [stix2 import] Taking Relationship objects target_ref as uuid
- Better than using the Relationship id that is not
  going to be  represented in MISP
- We directly have the uuid of the object that will
  receive an Object Reference
2018-11-07 09:12:10 +01:00
chrisr3d a282ed23a5
fix: [stix2 import] Excluding patterns with any of some linking words
- Since those patterns contain linking words we do
  not know how to map, we do not even try to parse
  them and only stix2-patterns will be created
  from them
2018-11-06 18:20:02 +01:00
chrisr3d 3a9fc1e811
fix: [stix 1&2 export] Making initiation lists immutable
- Lists only used for mapping should be immutable
  since they are not modified. Thus declaring as
  tuples is more appropriate
2018-11-06 13:36:48 +01:00
Richard van den Berg 69fdac7efd Keep CIDR subnet size in stix export 2018-11-06 13:05:54 +01:00