Commit Graph

15647 Commits (b71b58c6e43e991b23bdbbca53ca2313eb5d8bc9)

Author SHA1 Message Date
Jakub Onderka 35dd366fc6
fix: [internal] HTML code fix 2020-06-23 14:02:45 +02:00
Jakub Onderka ce47d32df1 chg: [internal] Move getting sightings range to one place 2020-06-23 08:44:55 +02:00
Jakub Onderka ea5a819064 chg: [internal] Faster loading sightings if the same attribute is requested 2020-06-23 08:37:14 +02:00
iglocska eb9e1a490c
chg: [version] bump 2020-06-22 16:54:28 +02:00
StefanKelm 1e97f16c3c
Update side_menu.ctp
Adjusts menu to be in line with "Global Actions"
2020-06-22 16:06:43 +02:00
Raphaël Vinot 688585b323 chg: [PyMISP] Bump 2020-06-22 14:34:49 +02:00
iglocska 6b95047c1e
Merge branch '2.4' of github.com:MISP/MISP into 2.4 2020-06-22 11:11:31 +02:00
iglocska 2eccb31636
fix: [ACL] unpublished_private global setting tightened to include correlations
- Thanks to Jakub Onderka for reporting and providing a fix to this!
2020-06-22 11:10:25 +02:00
iglocska 609bfbd450
fix: [security] missing ACL lookup on attribute correlations
- attribute correlation ACL checks are skipped when querying the attribute restsearch API revealing metadata about a correlating but unreachable attribute.

- Thanks to Jakub Onderka for his tireless work and for reporting this!
2020-06-22 11:00:56 +02:00
Jakub Onderka e768d5071f chg: [feed] Faster freetext feed caching 2020-06-20 10:13:01 +02:00
Jakub Onderka f46ca1634a chg: [internal] Use tmp file fro Feed::getCache 2020-06-20 09:54:32 +02:00
Jakub Onderka 3d12cb3f3c chg: [internal] Attribute REST search optimisations and error handling 2020-06-19 23:45:22 +02:00
chrisr3d 6c7c481419
fix: [stix2 import] Quick issues fixing
- Fixed issue that could happen sometimes during
  an external pattern parsing when we split the
  identifier of the pattern from the value.
  We now make sure the identifier is stripped, so
  we avoid issues with the mapping dictionaries
  that could not recognize it
- Also displaying  a warning message when we have
  no attributes resulting from the parsing of an
  external pattern or observable object
2020-06-19 15:59:26 +02:00
chrisr3d 6611b957fe
fix: [stix2 import] Small update on the mapping to work with some external patterns seen recently 2020-06-19 15:54:16 +02:00
chrisr3d a06405f643
fix: [stix2 import] Fixed some external observable objects import 2020-06-19 14:07:00 +02:00
chrisr3d b0cfb39a61
fix: [stix2 import] Fixed no longer existing variable in the mapping script 2020-06-19 13:59:02 +02:00
chrisr3d a08d3e8e4d
fix: [stix2 import] Added the function to parse external email-address observable objects, that was missing 2020-06-19 13:48:51 +02:00
chrisr3d eec2a26950
chg: [stix2 import] Parsing external pattern made with 'OR' separators the same way we do for pattern with 'AND'
- Also slight update of some mapping dictionaries
  to go with the changes introduced with this
  commit on the main script
2020-06-19 13:45:31 +02:00
chrisr3d fefc05de16 Merge branch 'rework_stix' into 2.4 2020-06-18 19:59:25 +02:00
chrisr3d 9df85a7eba Merge branch '2.4' of https://github.com/MISP/MISP into rework_stix 2020-06-18 18:53:56 +02:00
chrisr3d 35f51038ef
cleanup: [stix] Cleaned up the recently changed scripts
Including:
- Removed some unused imports and variable
- Renamed some variable which could have been
  built-in methods redefinition
- Typos
2020-06-18 18:49:45 +02:00
chrisr3d 041f5995e8
fix: [stix2 import] Better way of parsing some attributes and objects
- For single attributes that could be part of an
  object and would lose some context if imported
  as single attribute without their object
  relation (mostly attributes of type 'text'),
  we decide to import them as object anyway to
  avoid the increase of context-less attributes
- Also cleaner way to parse observable objects and
  patterns that will alwyas give single attributes
2020-06-18 18:18:54 +02:00
Andras Iklody 856abf84d2
Merge pull request #6028 from JakubOnderka/patch-115
fix: [UI] Typo
2020-06-18 16:35:13 +02:00
Jakub Onderka 7eb464a58f
fix: [UI] Typo 2020-06-18 16:34:01 +02:00
Jakub Onderka 10516d30ef chg: [sightings] Check if sighting already exists before getting attribute info 2020-06-18 15:09:06 +02:00
Jakub Onderka bc19103aa3 chg: [sightings] Save one SQL query when saving sighting if event UUID is given 2020-06-18 15:08:23 +02:00
Andras Iklody a8994f2db3
Merge pull request #6022 from MISP/rework_stix
STIX parsing updates
2020-06-17 16:12:34 +02:00
chrisr3d 04ec3c71ba
fix: [stix2 export] Typo in variable name 2020-06-17 13:59:37 +02:00
chrisr3d 278cb51c07
chg: [stix2 tests] Bumped the latest MISP & STIX2 test files 2020-06-17 13:49:55 +02:00
chrisr3d 8f539b26b7 Merge branch '2.4' of https://github.com/MISP/MISP into rework_stix 2020-06-17 13:24:40 +02:00
Andras Iklody 4693929a5d
Merge pull request #5916 from JakubOnderka/patch-100
chg: [correlations] Big speedup when correlating CIDR
2020-06-17 13:15:10 +02:00
Andras Iklody a4fdff5af9
Merge pull request #6019 from D4-project/2.4
add [widget] Authentication failure widget
2020-06-17 13:13:38 +02:00
Jakub Onderka 5346190afb new: [correlations] Enable CIDR correlations for ip-src|port and ip-dst|port types 2020-06-17 11:11:51 +02:00
Jean-Louis Huynen 245fdf452c
chg: [widget] remove unused var, make test pass 2020-06-17 10:27:54 +02:00
chrisr3d b254571245
chg: [stix2 import] Moved all the mapping dictionaries to the mapping script 2020-06-17 10:03:51 +02:00
Jakub Onderka 48c9c32e48 chg: [correlations] Faster IPv4 CIDR correlation 2020-06-17 09:17:57 +02:00
Jakub Onderka 8454ca38c7 chg: [correlations] Faster IPv6 correlation 2020-06-17 09:17:57 +02:00
Jakub Onderka 1d0d913972 chg: [correlations] Big speedup when correlating CIDR 2020-06-17 09:17:57 +02:00
chrisr3d 1dcea80a01
chg: [stix2 import] Temporary rework stix2 to misp script should now be ready to replace the original stix2 to misp script 2020-06-17 00:21:25 +02:00
chrisr3d f69404291a
wip: [stix2 import] More complete external patterns mapping 2020-06-17 00:04:57 +02:00
chrisr3d 72d6a275dc Merge branch '2.4' of https://github.com/MISP/MISP into rework_stix 2020-06-16 23:38:11 +02:00
chrisr3d a197963731
wip: [stix2 import] Importing external domain, ip & network traffic patterns 2020-06-16 20:16:05 +02:00
chrisr3d d7adf4bc19
wip: [stix2 import] Importing external network traffic patterns 2020-06-16 19:07:21 +02:00
chrisr3d 351b949e04
fix: [stix2 export] Reverted the email object attribute 'from' export as observable object
- From-ref is always a single value, we cannot use
  a list of references
2020-06-16 19:02:06 +02:00
Jean-Louis Huynen 3b651621e2
add [widget] Authentication failure widget 2020-06-16 17:19:34 +02:00
Raphaël Vinot ae699627a9 chg: Bump PyMISP 2020-06-16 15:04:28 +02:00
iglocska 120658b8c0
Merge branch '2.4' of github.com:MISP/MISP into 2.4 2020-06-16 14:31:15 +02:00
Raphaël Vinot 9a911ac039 Merge branch '2.4' of github.com:MISP/MISP into 2.4 2020-06-16 14:30:34 +02:00
Raphaël Vinot 5a512063a3 chg: [PyMISP] Bump 2020-06-16 14:30:23 +02:00
iglocska 0f40197b03
chg: [version] bump 2020-06-16 14:22:16 +02:00