Commit Graph

465 Commits (75041b5e1f10ed7ebda9def63744811e71caf6a4)

Author SHA1 Message Date
iglocska a70b786e25 fix: If no distribution level set, don't try to check if it's set to sharing group on the attribute level
- Attribute->editAttribute()
2017-11-22 10:55:24 +01:00
iglocska 45a2d1a09b new: Added phone number recognition to the freetext import tool
- also, changed the massaging of phone number type attributes to replace 00 with +
2017-11-16 16:25:46 +01:00
iglocska 396eecd242 fix: Ugly fix for the float issues 2017-11-08 18:55:13 +01:00
iglocska 7492d2799f new: Sightings ingested on import/sync 2017-11-03 15:18:46 +01:00
iglocska 3baa9978ec fix: Changed relationship name of filesize in add attachments to size-in-byte 2017-11-02 18:38:04 +01:00
iglocska f57b510723 Merge branch '2.4' of https://github.com/MISP/MISP into 2.4 2017-10-27 15:56:15 +02:00
iglocska 68f4833893 new: First version of the zmq reimplementation 2017-10-27 09:10:46 +02:00
iglocska a5a7bf47b3 fix: Added initialisation of Log model in the editAttribute() function if the save fails 2017-10-25 10:53:04 +02:00
iglocska a9d156f0e2 fix: Added default category for gender 2017-10-20 14:34:39 +02:00
iglocska b535adc779 fix: Added email-message-id's default category 2017-10-18 08:26:31 +02:00
Steffen Sauler 89e747da13 Removed duplicates from $categoryDefinitions
Payload delivery/ip-dst|port
Payload delivery/ip-src|port
Support Tool/text
2017-10-03 16:10:29 +02:00
Andras Iklody 63a00df202 Merge pull request #2515 from c-goes/emailregex
Allow $ in email addresses
2017-09-27 16:34:00 +02:00
iglocska 343e5b881f fix: Fixed potential double hashing of samples with the encrypt flag 2017-09-27 15:47:29 +02:00
c-goes 49ed85dd4e Allow $ in email addresses 2017-09-27 13:01:14 +02:00
iglocska a61b5007cf fix: Fixed an issue with pushing a sample via the API / add attachments when no object templates are loaded 2017-09-25 13:08:26 +02:00
iglocska 3f76fd6ea7 new: Rework of the attachment uploader
- add attachments and upload_sample now share code
- allow the same features via upload_sample (object creation / use of advanced add attachments)
- new flag: advanced

- example:

  POST to mymisp/events/upload_sample
  BODY:
{"request":{"files": [{"filename": "bla.exe", "data": "U3RhckNyYWZ0IElJIGZvcmV2ZXI="}], "distribution": 1, "advanced":1, "info":"bla"}}

- this commit was brought to you by CEF and

MMMH$= -  .,   ,,.          %H++  ,= %%$$$$X+ ;=== .=  :+HHHMMMHMMM####MMH@@@@@@HHH$=      HHH@HHHHH+XXX$$$$$$$$XXXXXXX+
MMH = -.  . ,-,,-,.         :H@H  =;;++$HH+XX$%+X%+$++=:=.XH@@@HMMMMMMMMH@@@@@@@HHX$   ,X@@@@@@@HHHHHHHHHHXXXXXXXXXXXXXX
  . ---,  -    ,,,            +@ .. ;++$HH+HHH++$+++HH+++, .+%HHMHHHHHHHHH+%%%++++$+   +++HHHHHHH+++++++++HHHHHHHHHHHHHH
- -- ,,,  --,. -                 , ,; +$XHH@@@@HHH@@@HHHH+$+$X+HH+$$+ ;  ;=  .    %   +  ,+$X+++XXXXXXXXXXXXX++HH+++++++
---==,,--,-,-., :     .          -,,:/ $XHH@HMMMMMMMMMM@HHX$H@MHHHHX+H%%$%+H/:.%. $. @,,,. $$XXXXXXXXXXXXXXXXXXXXXXXXXX+
  =  - --,,   , --   ..             =/ +$+H@@HMMMMMMMMH+H+++HHHHHHHH@+++++H+X++X+$$  = ,,, - $$XXXXX$$$$X$$$$$$$$$$$$$$X
====== --,,,, ,= =              ,==== ++$$+HHMMM####MH+$$+++HH@+HH@MHMMH@@H@@@HH+$+    ,,, ,. $$+$++$$$$$$$$$$++$$$$$$$X
 :==-===-,. ,., ==   .           :;; +++%$+H@HMMMMMMM%$%$$$+H@@+HH@MMMMMM@@@@HHH++H. .,,-,,--=/+$$%%%%%%%%$+%%$$$$$XXXXX
,  =  ==- -  .  ==             . =; ++++%++HHHHHHHHHH++%$$X+@@H+HHHMMMMMMHH@@@+X+    , ,,,,-  , ,$$$$$$$+++++$$$$XXXXX$$
,,-       ,    --=    ..       . ;/ ++++%$X+HHHHHHH  ++$++X+HH+X+H@HMMHHHHHHHH+.       ,,  ,,  , .    +$$$$+%+$$$$$$$$$$
,-----=-=--,   ,==             ..;/ +% +%$XX+HH++HH+/+$%++H@@HHXHHH@@@@@@@@HXX  .   .,,,.  ,,,,     ,-=$$$$$$$$$$$$$$$$$
 - ,- --  -,   ,-=     .         =/++%++%+++++XXXXX$$+.  +HHH@+$XHHHHHHHHH++$        -,,,  ,,      ,,,.   ,+$$$$$$$$$$$$
 ---,-----, .   ==               =/+%+++%++$$+++$X$$$$++,$$+++XXHHHHHHHH+X$+%       ,-,-,        ,,    .  .  ,+$$+++++++
== --, -- =--, ,,=          .    ./++$$++$+X$+/++$$XXXX$$$$XXXXXXH+HH+H+X$%%/     .,,,,,,    ..  ..    ,. ,,,-=+%+++ /++
+   -- -  -,,-  .,    .  . .      = +$$++++HH+.  ,+$$+++++++$XX$X$XHHH+X$$+      ..--,-    .. .        .    ,-, = ======
MH - ---- --,,,    .       .. ,      %++$$X++++ +%++++++++%++$$$$$+H++X$$+        --,    .         .   .        =  .====
MM=,-, ---,,,,,    . .     ...,,,   =/++%$$XXXX+/+++@@H@HX$+%$$+HHHHH$$$+:       ,--    .     ,. ..       .. ==::;=-:;;;
MM+ ,----,,,,              , .. ,.      +++X+HH+++++%++$++++$$+HHH+++$$          ,-          ,   .       .   : ;/ +%+.
MMH ,-,-,, ,,.        .    -,     =     = +$+H@HH++++$$X$$+++HHH+++$                       ,    ..       ,  +++++++%%+%+
MM@,--,-,,,,,. .     ,,     .    ,-,    .=+$XHHHXXHHHHHHHH@@@@HX$%+:          ,, .      ..,,  .....    ...%%%%++%%%%%%%%
M@@== ,,,  ,                               ++++XX++HHHHHH++HHH+,              ,         ,  .  ....     . +$+%%%%%%+%%%%%
H@H+=,,,  ..                                  ,,+%$+H@HHHXX++,               ,         ,,  .  ...   . ,$$$$$%%%%%+%+%%%%
@H+,-,,.....       .                          .,.;; ++$$X+%+:-              ,  .     .,,,  .  ...   . XXX$$$%%%%%%+%%%%%
+++ -, . ...                             .  .======== === ,                          ,, . .  ..   . -,XXX$X$+$+%%%%%%%%%
$+     .                                ===:; ++++ ++++-,.  ,                       ,-,          .  $X+XX+XXX$$+%++%%%%%
++: ,. .                         ,-,,-==:; %%%%%+%$$%$$X$$$+%+:==        .        . ,,           ..+X$XXXXXX$$$+%%$$%%%%
=:                              ,,,  ==   ++++++$+$$%+++$$$++$+ . ==     .        .,,,             +$$$$$$$$$$$$$$+$%%%+
 ,                          ,---, =:;/++$$XX$$$$$$X+H@H@HHH$%%%$X$++;===== .      .,            .. +%%+$++$%$$$$$$%%++%+
                               ===; +++$$$$+ +%+++%+HH@@@@HH+++ ++%+$+,  ===      ..             ,=;   +++++++++..   :;;
                      .   =:;   /++%$$++,  ,++HHMMHH@@@@HHHH@HH++++++ ,+$$+ .     ..                :=;;:;;;;;==========
                  .,,-==;;;+%  %%+$$$$ /+++@@@@@@@@@@HH@M@MH@@@HHHHH$$% /%$XXX$X  .                -=====::::=========::
                .    =;  ++++++$+++  , +%H@@@HHH@HH++HHH@MHHH@HHHHHH++++ , +%%+$                    ,, -       --- ==:=:
               ====;    ++++$$+%  ++H@HHHHHHH+X++X++@@@HHH@MMMMHHHHHH@HHHH+++++.                        ,,,,-,--- =:==;;
     .,., ==;// / ++++%+%+%+++$$+@H@@@@H@HHH+XXX$%+HHHH@@HH@HMMMMMMMMMMMMMMH@+%;                       ...,,,,,--==;;;/;
 .  ...=    .,+%$++%+$XXX$++%+++H@@@@HHH@HHH+++.   ++++H+HHHHHHHMMMMMMMMMMMM@++:                            ,,, ===;;;;;
==: .  ++++++++HH%H+++X++HH+H@HHHH@HHHHHHH+++++%++%%+%%++ . ,   = ++$H@@HMHMMH%=                                .  ..,,=
+++%$XXHHHHHH@H@@@@@H@HH@MMM@@HH@HH+HXH@HH%%+HH+XX$$$+++/;:=== ,,,,,, = ::; % :,                                   ...,,
%+++HHH@HHH@@HMHHHH@HHHMHMHHHHHH+XH+HHH++++HHHH@HHHHH++%+ -,  = ,=== ,,  ,,, .
H@HHHH#M#M#MHHHM#MMMMMMMHHHH@H@H++@H$+++HHM#MMMMHMMH@@HHHHHH%+++++%%%+++    ,  .
%%%%%%%%%%%%%%++++%%++   ..   ...  ..  .                                   +++%+++++++%++++%+++++++++%+%++%+%%++%++++++%
2017-09-25 12:22:19 +02:00
iglocska da573e6ee9 fix: Port added to network activity 2017-09-20 15:40:16 +02:00
truckydev caedc85077 bugfix for freetextimport and email
Correction for a bug when you add an email in freeTextImport.

When you select 'whois-registrant-email' attribut never created and an error is displayed.

because : 
'whois-registrant-email' not in 'Social network'  and 'Payload delivery' but only in 'Attribution'.

This PR add the type 'whois-registrant-email' in 'Social network'  and 'Payload delivery' category.

#### What does it do?

no issue has been created.

#### Questions

- [ ] Does it require a DB change?
- [ ] Are you using it in production?
- [ ] Does it require a change in the API (PyMISP for example)?

#### Release Type:
- [ ] Major
- [ ] Minor
- [X] Patch
2017-09-19 09:38:48 +02:00
iglocska d32c8e8d91 fix: Fixed double attachment of hashes for malware-samples 2017-09-18 17:20:04 +02:00
iglocska 9eb3ea2114 fix: When deleting an attirbute/objects, object references to it are not deleted, fixes #2477
- force a reference deletion on attribute/object deletion
- changed it to match deletion type
  - soft-deleting an attribute/object soft-deletes all references to it
  - hard-deleting an attribute/object hard-deletes all references to it
2017-09-17 12:26:06 +02:00
iglocska 64d16a420e new: Objects tied into e-mailing 2017-09-15 16:52:49 +02:00
iglocska 9ff81f5546 new: Add way to flatten attributes for certain exports (hids, nids) 2017-09-14 09:33:54 +02:00
iglocska 3938abe7e1 fix: Fixed the add attachments functionalities 2017-09-07 16:10:36 +02:00
iglocska 40ea22a272 Merge branch '2.4' into objects_wip 2017-09-04 17:38:06 +02:00
iglocska 58bfabfa73 new: Sync with objects wip
- add/edit of full events now capture all object related structures
- restructuring of the edit/add functionalities into clearly divided subsections
2017-09-04 17:26:45 +02:00
iglocska 73b47eda82 new: Added phone-number attribute type
- Just the yugest attribute types for @rommelfs
2017-09-04 17:21:00 +02:00
iglocska c09741ebfc new: Further work on the objects
- uuids of both sides saved in references
- attachment adding fixed
2017-09-01 17:42:54 +02:00
iglocska bb4f74bb1a new: Massive performance improvements to the restSearch API
- smarter choice of pre-filtering gives a huge boost for non attribute level parameters
- caching the results of certain parts of the algorithm
- cleaned up some inefficient looping merges
2017-08-31 16:43:20 +02:00
iglocska 5552d7c030 new: Several new features
- added multiple flag among other things
2017-08-29 18:28:18 +02:00
iglocska c8b0be9431 new: Added first iteration of new add attachment functionality
- still WIP
2017-08-28 09:18:40 +02:00
iglocska d3d6566b16 new: Various new features for the objects 2017-08-23 11:57:40 +02:00
iglocska 961bc76393 Merge branch '2.4' into objects_wip 2017-08-21 10:17:16 +02:00
iglocska a2d401ab50 fix: Added event_uuid to attribute view 2017-08-14 08:52:29 +02:00
iglocska fb357a8a78 chg: Sane defaults set by pre-validation script as a fallback (attributes) 2017-08-11 15:57:08 +02:00
iglocska aa07299abe Merge branch '2.4' into objects_wip 2017-08-10 07:29:50 +02:00
iglocska f9b0ebc199 fix: Fixes the lookup of attributes in the UI attribute search to correctly adhere to sharing groups
- Attribute search was not correctly adhering to sharing group rules as it wasn't using the centralised lookup method

- As reported by Helge Aksdal
2017-08-06 12:25:40 +02:00
iglocska 3b004d5686 Merge branch '2.4' into objects_wip 2017-08-03 11:20:34 +02:00
Alexandre Dulaunoy 3d8a7dfbb0
Fix #2347 - cookie attribute type
HTTP cookie as often stored on the web client and can be authentication
or even session cookie.
2017-07-21 09:36:55 +02:00
Kevin Allix 2248846706 attachments_dir: Default value queried through a function to workaround PHP inability to have anything useful stored in a class property 2017-07-10 12:42:23 +02:00
Kevin Allix 1ea33e811a Add an optional setting attachments_dir, and adapt existing code to use that setting 2017-07-07 17:29:13 +02:00
iglocska 83fdd02294 fix: Massive performance boost when adding attributes to an already large event 2017-07-07 10:12:25 +02:00
iglocska df5daae664 chg: Further work on the objects
- view events with objects via the API
- Further improvements to adding objects
2017-07-02 22:42:44 +02:00
iglocska d2e1a8e259 new: More work on the objects
- mostly on adding / validating / saving objects including the UI for it
2017-07-02 20:32:30 +02:00
iglocska 3fd09dbeb4 fix: Fixed a group by issue 2017-06-19 15:29:51 +02:00
iglocska 531937ef29 fix: Possible fix for a massive performance bug on older MYSQL versions when entering attributes 2017-06-17 09:59:13 +02:00
iglocska ec65e19781 fix: Fix to the CIDR caching 2017-06-16 17:57:06 +02:00
iglocska 7930555618 new: caching of the CIDR blocks to boost the advanced correlation performance
- massive boost to performance when using advanced correlations
2017-06-16 16:51:49 +02:00
iglocska 57857c3a32 new: Performance improvements for the pub-sub modules
- Only load and open connection to redis for the pub-sub connection once.
- Massive performance boost when the ZMQ functionality is enabled
2017-06-16 08:41:12 +02:00
iglocska 2d06ef9760 fix: Corrected range of valid port numbers for the attribute validation
- as pointed out by @MattCarothers
2017-06-14 08:24:17 +02:00
Matt Carothers bd73bf4140 Fix: validation for port attribute
The logical check for a valid port was backwards.  It looked for an integer outside the range of 1-65535 rather than inside.
2017-06-13 09:39:37 -04:00