Commit Graph

9 Commits (c770347828e46d00f03c0f9c9dbc090a429f3392)

Author SHA1 Message Date
iglocska a98dd9b489 Fix to the STIX export fixes #311 and a temporary fix to an OpenIOC import issue
- STIX export had 2 issues as pointed out by RichieB2B:
    - Incorrect name assigned to incidents due to copy-pasta fail
    - Historyitems incorrectly handled

- For the OpenIOC import:
    - Mapping DnsEntryItem/Host to hostname
    - Mapping of hostnames to Network activity failed due to incorrect capitalistion
    - Temporarily removed the ignore function on certain indicators. Ignoring an element in an AND-ed branch happens without a pruning of the element IDs
2014-10-30 10:30:55 +01:00
iglocska da8b62d3f8 Added OpenIOC mapping for DnsEntryItem/RecordName fixes #210 2014-02-17 16:20:16 +01:00
iglocska 08cb33b2bd Some minor changes
- Contextual comments added to all imports (GFI, ThreatConnect, OpenIOC)

- Some minor fixes to OpenIOC exports and linebreaks in attributes
2013-11-04 10:11:58 +01:00
iglocska 64f32389e9 Fixes to the openIOC import tool
- should handle nested OR branches better now
- domain now mapped to Network/DNS
2013-07-30 11:01:16 +02:00
iglocska db24e8c1f4 Update to the IOCImprt/Export
- bringing the two components up to date with the distribution changes
2013-06-11 10:50:16 +02:00
iglocska 876381d295 Update to the IOC import tool
- Tries to resolve some branching to increase the number of successful
  imports

- Moved to the event view and the import only adds attributes without
  changing the event's data itself

- Visualisation of the original IOC, showing the successes and failures
2013-05-29 13:42:04 +02:00
Iglocska c653b91491 Further progress on the OpenIOC import
- works fine now, but a lot of data still gets discarded
2013-05-08 09:57:18 +02:00
Iglocska 9917179656 Further work on the IOCImport
- Also, major performance fix for the event view
2013-05-07 10:51:55 +02:00
Iglocska 60e4190b84 OpenIOC Importer
- Import from .ioc
- map to MISP attributes and insert them
- try to resolve AND logical operators where possible, otherwise discard
2013-05-06 16:53:54 +02:00