Jakub Onderka
35dd366fc6
fix: [internal] HTML code fix
2020-06-23 14:02:45 +02:00
Jakub Onderka
ce47d32df1
chg: [internal] Move getting sightings range to one place
2020-06-23 08:44:55 +02:00
Jakub Onderka
ea5a819064
chg: [internal] Faster loading sightings if the same attribute is requested
2020-06-23 08:37:14 +02:00
iglocska
eb9e1a490c
chg: [version] bump
2020-06-22 16:54:28 +02:00
StefanKelm
1e97f16c3c
Update side_menu.ctp
...
Adjusts menu to be in line with "Global Actions"
2020-06-22 16:06:43 +02:00
Raphaël Vinot
688585b323
chg: [PyMISP] Bump
2020-06-22 14:34:49 +02:00
iglocska
6b95047c1e
Merge branch '2.4' of github.com:MISP/MISP into 2.4
2020-06-22 11:11:31 +02:00
iglocska
2eccb31636
fix: [ACL] unpublished_private global setting tightened to include correlations
...
- Thanks to Jakub Onderka for reporting and providing a fix to this!
2020-06-22 11:10:25 +02:00
iglocska
609bfbd450
fix: [security] missing ACL lookup on attribute correlations
...
- attribute correlation ACL checks are skipped when querying the attribute restsearch API revealing metadata about a correlating but unreachable attribute.
- Thanks to Jakub Onderka for his tireless work and for reporting this!
2020-06-22 11:00:56 +02:00
Jakub Onderka
e768d5071f
chg: [feed] Faster freetext feed caching
2020-06-20 10:13:01 +02:00
Jakub Onderka
f46ca1634a
chg: [internal] Use tmp file fro Feed::getCache
2020-06-20 09:54:32 +02:00
Jakub Onderka
3d12cb3f3c
chg: [internal] Attribute REST search optimisations and error handling
2020-06-19 23:45:22 +02:00
chrisr3d
6c7c481419
fix: [stix2 import] Quick issues fixing
...
- Fixed issue that could happen sometimes during
an external pattern parsing when we split the
identifier of the pattern from the value.
We now make sure the identifier is stripped, so
we avoid issues with the mapping dictionaries
that could not recognize it
- Also displaying a warning message when we have
no attributes resulting from the parsing of an
external pattern or observable object
2020-06-19 15:59:26 +02:00
chrisr3d
6611b957fe
fix: [stix2 import] Small update on the mapping to work with some external patterns seen recently
2020-06-19 15:54:16 +02:00
chrisr3d
a06405f643
fix: [stix2 import] Fixed some external observable objects import
2020-06-19 14:07:00 +02:00
chrisr3d
b0cfb39a61
fix: [stix2 import] Fixed no longer existing variable in the mapping script
2020-06-19 13:59:02 +02:00
chrisr3d
a08d3e8e4d
fix: [stix2 import] Added the function to parse external email-address observable objects, that was missing
2020-06-19 13:48:51 +02:00
chrisr3d
eec2a26950
chg: [stix2 import] Parsing external pattern made with 'OR' separators the same way we do for pattern with 'AND'
...
- Also slight update of some mapping dictionaries
to go with the changes introduced with this
commit on the main script
2020-06-19 13:45:31 +02:00
chrisr3d
fefc05de16
Merge branch 'rework_stix' into 2.4
2020-06-18 19:59:25 +02:00
chrisr3d
9df85a7eba
Merge branch '2.4' of https://github.com/MISP/MISP into rework_stix
2020-06-18 18:53:56 +02:00
chrisr3d
35f51038ef
cleanup: [stix] Cleaned up the recently changed scripts
...
Including:
- Removed some unused imports and variable
- Renamed some variable which could have been
built-in methods redefinition
- Typos
2020-06-18 18:49:45 +02:00
chrisr3d
041f5995e8
fix: [stix2 import] Better way of parsing some attributes and objects
...
- For single attributes that could be part of an
object and would lose some context if imported
as single attribute without their object
relation (mostly attributes of type 'text'),
we decide to import them as object anyway to
avoid the increase of context-less attributes
- Also cleaner way to parse observable objects and
patterns that will alwyas give single attributes
2020-06-18 18:18:54 +02:00
Andras Iklody
856abf84d2
Merge pull request #6028 from JakubOnderka/patch-115
...
fix: [UI] Typo
2020-06-18 16:35:13 +02:00
Jakub Onderka
7eb464a58f
fix: [UI] Typo
2020-06-18 16:34:01 +02:00
Jakub Onderka
10516d30ef
chg: [sightings] Check if sighting already exists before getting attribute info
2020-06-18 15:09:06 +02:00
Jakub Onderka
bc19103aa3
chg: [sightings] Save one SQL query when saving sighting if event UUID is given
2020-06-18 15:08:23 +02:00
Andras Iklody
a8994f2db3
Merge pull request #6022 from MISP/rework_stix
...
STIX parsing updates
2020-06-17 16:12:34 +02:00
chrisr3d
04ec3c71ba
fix: [stix2 export] Typo in variable name
2020-06-17 13:59:37 +02:00
chrisr3d
278cb51c07
chg: [stix2 tests] Bumped the latest MISP & STIX2 test files
2020-06-17 13:49:55 +02:00
chrisr3d
8f539b26b7
Merge branch '2.4' of https://github.com/MISP/MISP into rework_stix
2020-06-17 13:24:40 +02:00
Andras Iklody
4693929a5d
Merge pull request #5916 from JakubOnderka/patch-100
...
chg: [correlations] Big speedup when correlating CIDR
2020-06-17 13:15:10 +02:00
Andras Iklody
a4fdff5af9
Merge pull request #6019 from D4-project/2.4
...
add [widget] Authentication failure widget
2020-06-17 13:13:38 +02:00
Jakub Onderka
5346190afb
new: [correlations] Enable CIDR correlations for ip-src|port and ip-dst|port types
2020-06-17 11:11:51 +02:00
Jean-Louis Huynen
245fdf452c
chg: [widget] remove unused var, make test pass
2020-06-17 10:27:54 +02:00
chrisr3d
b254571245
chg: [stix2 import] Moved all the mapping dictionaries to the mapping script
2020-06-17 10:03:51 +02:00
Jakub Onderka
48c9c32e48
chg: [correlations] Faster IPv4 CIDR correlation
2020-06-17 09:17:57 +02:00
Jakub Onderka
8454ca38c7
chg: [correlations] Faster IPv6 correlation
2020-06-17 09:17:57 +02:00
Jakub Onderka
1d0d913972
chg: [correlations] Big speedup when correlating CIDR
2020-06-17 09:17:57 +02:00
chrisr3d
1dcea80a01
chg: [stix2 import] Temporary rework stix2 to misp script should now be ready to replace the original stix2 to misp script
2020-06-17 00:21:25 +02:00
chrisr3d
f69404291a
wip: [stix2 import] More complete external patterns mapping
2020-06-17 00:04:57 +02:00
chrisr3d
72d6a275dc
Merge branch '2.4' of https://github.com/MISP/MISP into rework_stix
2020-06-16 23:38:11 +02:00
chrisr3d
a197963731
wip: [stix2 import] Importing external domain, ip & network traffic patterns
2020-06-16 20:16:05 +02:00
chrisr3d
d7adf4bc19
wip: [stix2 import] Importing external network traffic patterns
2020-06-16 19:07:21 +02:00
chrisr3d
351b949e04
fix: [stix2 export] Reverted the email object attribute 'from' export as observable object
...
- From-ref is always a single value, we cannot use
a list of references
2020-06-16 19:02:06 +02:00
Jean-Louis Huynen
3b651621e2
add [widget] Authentication failure widget
2020-06-16 17:19:34 +02:00
Raphaël Vinot
ae699627a9
chg: Bump PyMISP
2020-06-16 15:04:28 +02:00
iglocska
120658b8c0
Merge branch '2.4' of github.com:MISP/MISP into 2.4
2020-06-16 14:31:15 +02:00
Raphaël Vinot
9a911ac039
Merge branch '2.4' of github.com:MISP/MISP into 2.4
2020-06-16 14:30:34 +02:00
Raphaël Vinot
5a512063a3
chg: [PyMISP] Bump
2020-06-16 14:30:23 +02:00
iglocska
0f40197b03
chg: [version] bump
2020-06-16 14:22:16 +02:00