Commit Graph

1759 Commits (46bd782cf0ce7a3517c145f3ec23e1dfa58168bd)

Author SHA1 Message Date
Iglocska c9d1badaa3 Organization field in Servers too short to fit valid organisation identifiers, fixes #436
- updated the MYSQL.sql file for future MISP installations
- added admin script to do the update from the web interface
2015-03-17 00:06:59 +01:00
Iglocska b29e8fdada Site admins can now create proposals, fixes #417
- site admins can now create proposals to an event / attribute as long as the event does not belong to their organisation
- new icon for proposals to differentiate them from edits
2015-03-14 09:01:20 +01:00
Iglocska 524871ab52 Sync users should default to termsaccepted and no password change required, fixes #432 2015-03-14 08:35:24 +01:00
Iglocska 50a03e897d Search in logs fixed, fixes #434
- The log search incorrectly set the search terms for empty fields, meaning that any log entries that had unfilled columns, such as it is the case with admin_email would never return results
2015-03-14 08:29:19 +01:00
iglocska 6763159e87 Security fix
- filenames are now enclosed by quotes instead of double quotes while executing the zip command via exec
2015-03-10 10:58:15 +01:00
iglocska 66db71e835 json view fixed, fixes #411 2015-02-24 15:46:42 +01:00
iglocska 8dad666b38 Disabled the animation in the MISP logo
- it was quite heavy on CPU usage and it was too subtle to notice anyway
2015-02-20 11:11:00 +01:00
iglocska 4239edffc9 Org admins editing privileged users demotes the privileged user to a lower permission level, fixes #408
- an org admin now correctly can select the previously assigned privileged role for a user that he/she is editing
2015-02-20 09:17:25 +01:00
iglocska 6782159b53 API search incorrectly generating JSON with several events, fixes #407
- also fixed the edit button on the index
2015-02-18 11:45:15 +01:00
iglocska 0dd8318fb3 Further work on the exports
- Performance improvements for the event search exports
- JSON view code moved to Lib
- Fixed an issue that didn't restrict the dates correctly with the from / to parameters
2015-02-16 17:31:32 +01:00
iglocska fbca80d680 Added more contextual info for the CSV exports, fixes #391 2015-02-16 14:47:21 +01:00
iglocska b5be1a36fb Correlation disabled for http-method, fixes #406 2015-02-16 13:30:15 +01:00
iglocska eed95b1129 Missing json view file added
- return attributes fails when requesting the results in JSON
- added missing view file
2015-02-16 13:14:05 +01:00
iglocska 54a86732e4 Relaxed the auth key requirement for nids exports
- incorrect check on the nids exports blocked logged in users from downloading the snort/suricata rules of an event
- check removed
2015-02-16 08:59:53 +01:00
iglocska 701160acd9 Fixed an issue with the free-text import failing on more than ~100 parsed values, fixes #389
- Caused by a 1k variable / form limit imposed by php since 5.3.9
- Form data now collected by JS and passed as a single JSON in the POST request
- Allows massive IOC lists to be imported
- improved performance
2015-02-10 14:42:24 +01:00
iglocska 12d7025bce Patch fixing json download, fixes #387
- World's smallest patch
2015-02-05 17:25:40 +01:00
iglocska 2aa902cd4b Removed the old documentation, fixes #378 and some small fixes
- resolved an issue of warnings being generated when an event without attributes / relations gets XML exported.
- added new dump of the documentation
2015-02-05 10:11:29 +01:00
iglocska 2401cedfdc Left off file in previous hotfix added
- added a file that was not pushed during the last hotfix
- some improvements to the XML export to lower memory usage
2015-02-04 11:06:41 +01:00
iglocska 8c30115f12 Documentation fail fixes #384 2015-02-03 21:53:03 +01:00
iglocska fddb06b3c2 Small change to the XML export
- won't write to file after all, simply keeps adding to a string in memory. Should still resolve the XML conversion taking up high amounts of memory issue.
2015-02-03 17:29:46 +01:00
iglocska f0aa849d04 Various improvements to the exports
- Unified the way exports accept negated parameters
- Fixed the documentation
- Most exports are now restrictable by the event date (From/To parameters)
- none cached XML export now writes to file after converting each event, clearing the memory and resolving any potential memory issues
2015-02-03 17:06:05 +01:00
iglocska 98f65aae09 Merging several pull requests and a few other changes
- Pull request by RichieB2B: CentOS 6 & 7 installation instructions
- Pull request by RichieB2B: STIX exports now include comments for indicators
- Pull request by RichieB2B: Issue fixed with md5 type attributes not generating observables correctly during a STIX export
- Password policy change-able by a site admin via a regex and a min char requirement. Old functionality assumed if not set.
- bug fixed with incorrect jobs being created appearing during a scheduled pull (designates a push)
- slight changes to the installation instructions
- database.default.php now uses localhost instead of 127.0.0.1 and the default MySQL port
2015-02-02 13:12:15 +01:00
iglocska be0fbfd108 Merge branch 'RichieB2B-ncsc-nl/stix_indicator_comments' into hotfix-2.3.41 2015-02-02 10:41:28 +01:00
Richard van den Berg c3615eff32 Pretify some comments 2015-01-29 17:24:44 +01:00
Richard van den Berg e6e66f3f1c Fixed typo 2015-01-29 17:21:54 +01:00
Richard van den Berg 883fe07861 Fixed typo 2015-01-29 17:20:57 +01:00
Richard van den Berg 0aa09fec4d Fix string assignments to StructuredText 2015-01-29 17:19:10 +01:00
Richard van den Berg 09511986e7 Map most MISP attribute comments into STIX 2015-01-28 17:48:11 +01:00
iglocska 0dd4304719 Merge branch 'RichieB2B-ncsc-nl/stix_md5_hash' into hotfix-2.3.41 2015-01-27 11:05:59 +01:00
iglocska 2018f822ec Fixed a bug with the way scheduled syncs are logged 2015-01-27 10:42:31 +01:00
iglocska 1b4f2a6408 Password complexity definable by admin
- administrators can use a regex and a length setting to define password requirements
- old behavior used if left untouched
2015-01-27 10:41:43 +01:00
Richard van den Berg 05cfbde5e7 Export md5 hashes without file name in STIX 2015-01-27 09:58:13 +01:00
Richard van den Berg 728e8cd29e Preserve indicator comments in STIX export 2015-01-27 09:54:52 +01:00
iglocska 6b6c62bd53 Fix to the new sync issues since 2.3.39, fixing #365
Incorrectly trying to look up authenticated user in the model fixed
2015-01-15 13:46:11 +01:00
iglocska cedaac360a Fixes to the scheduled tasks and some documentation issues
- Scheduled pulls should work correctly now
- Scheduled pushes and pulls correctly display in the logs
- Scheduled caching correctly sets the next date of execution
2015-01-12 17:35:08 +01:00
iglocska 43e283a7e0 Copy pasta fail 2014-12-19 15:36:36 +01:00
iglocska 85e7f66ada Added missing view 2014-12-19 15:18:34 +01:00
iglocska bb642579b6 Remote attribute deletion removed
- Deleting attributes on connected MISP instances can cause serious performance issues on multiple interconnected instnaces, temporarily removed
- Version number incremented
2014-12-19 15:01:14 +01:00
iglocska f4723e06ff Update to the automation page
- new parameters for the text export explained
2014-12-19 14:59:34 +01:00
iglocska 92679f6b69 New way to download a single event
- The event export buttons have been unified into a single download as... button
- clicking it loads a popup with all of the export formats
- added snort, suricata, text dump to the export options
- added the option for an extra setting for some exports (such as including non IDS flagged attributes, encoding attachments)
- easily extendable system

- moved the hidden popup divs into the general layout, can be easily reused anywhere

- removed the auth refresh option that was re-enabled recently as it seems to sometimes cause issues

- text exports now allow "all" to be specified as type, which will dump all attribute values that the user can see
- text exports now allow restricting the results based on event id
2014-12-19 13:32:16 +01:00
iglocska 3723119d83 Logging of admin emails and auth refresh
- admin emails now generate log entries
- authentication is refreshed on activity
2014-12-12 10:42:12 +01:00
iglocska f14a26444b Fix to some event altering actions not updating the timestamp 2014-12-10 14:08:08 +01:00
iglocska 3353b206b0 Small fix 2014-12-10 13:48:01 +01:00
iglocska 6e7554a26f Freetext import tool enhancement
- mass edit types where applicable
- ip-src/ip-dst type will create two attributes, one for each
2014-12-10 13:06:52 +01:00
iglocska 12692284fa Changed the annoying click to view feature on each row on certain index pages to double clicks 2014-12-05 15:27:54 +01:00
iglocska 67aa9d9859 Admin contact user menu moved next to new/list user buttons, recipient e-mails are now sorted alphabetically 2014-12-05 15:15:28 +01:00
iglocska 9e77393ee6 Empty filter options were not that obvious to some users in the event/user index filter popup. 2014-12-05 15:11:29 +01:00
iglocska 78edbc11d3 Long filename overlapping with malware button on attachment upload, fixes #357 2014-12-05 10:41:56 +01:00
iglocska 2e1dfca943 Attribute search now correctly searches attribute comments too for contained expressions, fixes #342 2014-12-05 10:13:07 +01:00
iglocska 2e28dd2dde Added tooltip for event ID in attribute search results, fixes #351 2014-12-03 17:23:32 +01:00