Commit Graph

624 Commits (cea416d82f68baf2a3a4ba4ea04076381be31c9c)

Author SHA1 Message Date
4ekin 5c51e78320 fix: TODO i18n strings in Attribute Model and updated default.pot 2019-04-02 16:59:49 +03:00
iglocska b519230f28 fix: [API] fixed adding malware-samples unencrypted with the encrypt key set, fixes #4355 2019-03-24 22:30:41 +01:00
iglocska beed84a335 Merge branch '2.4' of github.com:MISP/MISP into 2.4 2019-03-19 17:23:22 +01:00
iglocska 7141f70b20 Merge branch 'kafka' into 2.4 2019-03-19 17:23:05 +01:00
Andras Iklody 7f93270710
Merge pull request #4342 from liviuvalsan/bug_fix_bro_export
Fixing bug when exporting to Bro MISP attributes from events that contain a percentage sign inside the event info
2019-03-19 16:49:00 +01:00
Liviu Valsan 4656a5c1fa Fixing bug when exporting to Bro MISP attributes from events that contain a percentage sign inside the event info 2019-03-19 14:46:16 +01:00
Liviu Valsan fe3241addb Addressing performance issues for fetching attributes when blocking attributes via proposals 2019-03-19 14:23:08 +01:00
Nikos Filippakis 9d59b10368 Publish events to Kafka
Signed-off-by: Nikos Filippakis <nikolaos.filippakis@cern.ch>
2019-03-18 15:53:22 +01:00
iglocska 47d139c296 chg: [CS] indentation 2019-02-23 12:55:43 +01:00
Christophe Vandeplas 67efc70bf5 fix: [style] consistent space indentation 2019-02-10 13:08:55 +01:00
Alexandre Dulaunoy 14130b5229
chg: [datamodel] me being stupid 2019-02-01 09:07:32 +01:00
Alexandre Dulaunoy c5d10979a9
chg: [datamodel] anonymised updated 2019-01-31 23:44:58 +01:00
Alexandre Dulaunoy 89116dd544
chg: [datamodel] second step validation for anonymised attribute type 2019-01-31 23:39:46 +01:00
Alexandre Dulaunoy 33d690e643
chg: [datamodel] anonymised is any category 2019-01-31 23:35:31 +01:00
Alexandre Dulaunoy ef39349476
add: [datamodel] anonymise type added
Anonymised value - described with the anonymisation object via a relationship

Anonymisation object definition: https://www.misp-project.org/objects.html#_anonymisation
2019-01-31 23:19:17 +01:00
Alexandre Dulaunoy e65c2a536c
chg: [type] zeek attribute added (Zeek is the new name of Bro)
Both attribute types, zeek and bro will coexist as exchange of NIDS
rules under the old names is common in various MISP sharing communities.
2019-01-30 22:53:38 +01:00
Andras Iklody 3843e9bdaa
Merge pull request #3995 from patriziotufarolo/2.4
fix: check also event.org_id when validating event ownership in order to fetch attributes. Fixes #1918
2019-01-29 17:38:57 +01:00
mokaddem b64d5c82a7 fix: [attribute] Prevent undefined index on tag filtering.
As tags are popped from the attribute scope first, they will not be
available in the event scope.
2019-01-25 09:34:55 +01:00
iglocska c38d553192 fix: [interna] deprecated text() function's tag filter fixed 2019-01-25 09:11:01 +01:00
iglocska d64d57feea fix: [filters] Negative tag filters ignored event tags on the attriute search
- as reported by @hel10wor1d
2019-01-25 08:35:50 +01:00
iglocska 9512043de9 fix: [performance] query tweak to fool old crappy versions of mysql 2019-01-24 16:20:57 +01:00
iglocska 27d048db0c fix: [performance] Potential performance fix for older MySQL versions using the wrong index as key during fetchAttributes()
- observer a server prioritising the deleted flag index when filtering attributes, leading to a massive performance loss
- hacky solution to make deleted and object_id (during flattening) indeces unusable
2019-01-22 08:28:15 +01:00
iglocska dbb1e01487 chg: [internal] timestamp resolution for time ranges should reorder the conditions
- always take from (smaller timestamp) to (larger timestamp), no matter the order which they were entered in
2019-01-17 10:12:47 +01:00
Alexandre Dulaunoy eaacbaddd3
chg: [datamodels] fix hassh and hasshserver typo 2019-01-13 12:05:21 +01:00
Alexandre Dulaunoy f388e0eff3
chg: [datamodels] new types hassh-md5 and hasshserver-md5 added
"HASSH" is a network fingerprinting standard which can be used
to identify specific Client and Server SSH implementations.
The fingerprints can be easily stored, searched and shared
in the form of an MD5 fingerprint.

Fix #4007
2019-01-13 11:47:30 +01:00
Patrizio Tufarolo 32962184fa fix: check also event.org_id when validating event ownership in order to fetch attributes
Fixes #1918
2019-01-08 06:56:47 -05:00
iglocska e2965a79e4 Merge branch '2.4' of github.com:MISP/MISP into 2.4 2018-12-31 08:04:29 +01:00
iglocska 65709a353b Merge branch 'qb' into 2.4 2018-12-31 08:04:12 +01:00
eCrimeLabs c920925d48 Update Attribute.php
Added ja3-fingerprint-md5 as a deticated data type. Also updating the object for ja3
2018-12-30 12:26:33 +01:00
Daniel Roethlisberger 5b4079637a new: [attributes] Add cdhash attribute, 40+ digit hash, default Payload delivery, ids=1 (#3965) 2018-12-19 20:19:49 +01:00
Sami Mokaddem ed4f752d3a Merge remote-tracking branch 'origin/2.4' into querybuilder 2018-12-17 16:36:27 +01:00
co59 bbeef129c0 fix: [model] Network activity category: add x509-fingerprint-md5 and x509-fingerprint-sha256 2018-11-29 23:07:11 +01:00
iglocska 665b6ccbae fix: [internal] if no attribute distribution is found in the event edits, set the default instead of defaulting to 0 2018-11-29 15:33:45 +01:00
Sascha Rommelfangen 7425c87bef fix: [freetext] fix notice on freetext import 2018-11-26 16:07:39 +01:00
iglocska af0f40ab97 new: [server settings] Added automatic backup system for the server settings 2018-11-26 09:12:01 +01:00
iglocska 2d0259ce13 fix: [CS] coding standards script re-run 2018-11-23 14:11:33 +01:00
iglocska 5220dcec72 new: [API] Various enhancements and fixes to the APIs
- Added result count to restsearch API via the x-result-count header
- Added the includeProposals parameter to the attribute level restsearch
- Readability of events controller improved
- Fixed a bug blocking malware samples from being added using /events/add when the encrypt=1 flag was set for raw sample inclusion
2018-11-23 13:44:19 +01:00
iglocska bef72f9465 fix: [API] Fix non exportable tags being included in the attribute level restsearch 2018-11-20 19:53:02 +01:00
iglocska cfe934fb93 new: [search] Rework of the UI attribute search complete 2018-11-12 11:59:56 +01:00
mokaddem 695b71c555 chg: [Model] swapped openioc and json so that json is selected by default 2018-11-07 11:39:39 +01:00
iglocska c96be93e3c fix: [internal] Fix of wonky model function calls across the application for getting default attachment directories 2018-10-18 09:51:14 +02:00
iglocska 0bda88db39 fix: [internal] Fixes to invalid model function calls 2018-10-17 12:31:43 +02:00
www-data f9183dee3b Merge branch '2.4' into py-virtualenv 2018-10-15 17:09:18 +09:00
iglocska 4ce81e5d0b fix: [API] Further fixes to the query builder 2018-10-10 20:38:09 +02:00
iglocska 40e7584f10 fix: [API] Further fixes to the tag handling 2018-10-10 15:17:39 +02:00
iglocska 6ead277f0d fix: [API] Handle filters with no valid tags set as filter patterns correctly 2018-10-10 15:08:05 +02:00
iglocska 9412081680 fix: [API] Fixed broken check for overriding IDS flags via proposals, fixes #3748 2018-10-09 13:07:13 +02:00
iglocska 43558a9610 new: [API] rework of the searchall/quickFilter parameters
Now it correctly works as intended on both attribute and event contexts
2018-10-08 10:17:57 +02:00
Steve Clement e26e4a2e92 Merge branch '2.4' into py-virtualenv 2018-10-08 07:45:04 +08:00
iglocska 65e16854d4 new: [export] Further changes required for the reworked export added 2018-10-05 14:48:41 +02:00