MISP
/
PyMISP
mirror of https://github.com/MISP/PyMISP
2
0
Fork 0
Code Issues Releases Wiki Activity
891 Commits
13 Branches
172 Tags
94 MiB
Commit Graph

530 Commits (89e900671c610d02ec5bf0e3e4d4a82ce7f5fece)

Author SHA1 Message Date
Raphaël Vinot 6885779be5 Allow to set org_id and orgc_id when creating a new MISPEvent 
Squashed commit of the following:

commit 8a5dfda8a728d8722dfba890729066948e744e44
Merge: 477f81d 332fc05
Author: Raphaël Vinot <raphael@vinot.info>
Date:   Tue Nov 15 09:52:26 2016 +0100

    Merge https://github.com/garanews/PyMISP into garanews-master

commit 332fc0508d3f5dc32cf962bd2cad1d800b6b4b02
Author: garanews <puntogtg@tiscali.it>
Date:   Mon Nov 14 15:29:04 2016 +0100

    Delete api_old.py

commit 7fb955fa2fba964ae7120f4cf56cf85e203efe96
Author: garanews <puntogtg@tiscali.it>
Date:   Mon Nov 14 14:05:22 2016 +0100

    Create api.py

commit 7f6f45d9ce8ec4e948c5b2513b9bc59296985e09
Author: garanews <puntogtg@tiscali.it>
Date:   Mon Nov 14 14:05:06 2016 +0100

    Rename api.py to api_old.py

commit 63c325816c2bda646f462a322eb3063788ab91a4
Author: garanews <puntogtg@tiscali.it>
Date:   Mon Nov 14 11:48:17 2016 +0100

    Add files via upload

commit edf0cd1d90e89c30a4d3ef756d6bc6501de3885f
Author: garanews <puntogtg@tiscali.it>
Date:   Wed Nov 2 15:31:42 2016 +0100

    Add files via upload
 2016-11-15 10:21:49 +01:00
Raphaël Vinot 477f81d3ab Fix openioc loader, update mapping 2016-11-10 11:41:13 +01:00
Déborah Servili 3cadc1a78d Improvements in the user api 2016-11-04 12:00:42 +01:00
Déborah Servili a11e26f80b Improvements in the user api 2016-11-04 11:58:21 +01:00
Raphaël Vinot 75ebedae5c Merge pull request #68 from MISP/tooling 
[WIP] Tooling
 2016-11-03 16:04:28 -04:00
Raphaël Vinot 9f0737c34a Add some mapping to openioc, add python version in the user agent 2016-11-03 16:02:09 -04:00
Déborah Servili dbba8ed0f9 add user management and examples 2016-11-03 11:41:37 +01:00
Déborah Servili 0b462404de add user management and examples 2016-11-03 11:23:48 +01:00
Raphaël Vinot 6c5289d495 Initial version of the OpenIOC loader 2016-10-29 15:27:48 -04:00
Raphaël Vinot 81e3ce37af Fix forgotten import 2016-10-27 17:04:23 -04:00
Raphaël Vinot 857cd40ea2 Update import 2016-10-27 16:29:56 -04:00
Raphaël Vinot ac2e801d97 Add helper tool to load STIX objects. 2016-10-27 16:25:17 -04:00
Raphaël Vinot d48f248176 Fix Python2 - Python3 support 2016-10-27 15:58:58 -04:00
Raphaël Vinot 2907fd18d7 Cleanup neo4j support 2016-10-27 15:58:08 -04:00
Raphaël Vinot abd836babb Add simple script to push MISP events into Neo4j 2016-10-25 17:28:55 -04:00
Raphaël Vinot 2c2bfe2354 Properly warn if the user is using python2 2016-10-25 11:36:49 -04:00
Raphaël Vinot 5ccb4db3d3 Allow to load a MISP event without attributes 2016-10-25 11:33:51 -04:00
Raphaël Vinot c8aeab7823 Bump to v2.4.53 2016-10-21 15:42:38 +02:00
Raphaël Vinot f8f117f1a4 Cleanup 2016-10-21 13:42:22 +02:00
Raphaël Vinot aec6a2bbf2 Merge branch 'master' of github.com:CIRCL/PyMISP into next 2016-10-20 14:33:27 +02:00
Tom ec508191ca Including Network-Other option for API 2016-10-20 09:49:06 +01:00
Raphaël Vinot 0a63285efb Fix Python2 support 2016-10-19 19:00:09 +02:00
Raphaël Vinot 49433cdc3a Print a warning in case python2 is used. 2016-10-19 18:52:49 +02:00
Raphaël Vinot 3455567d45 Fix schemas 2016-10-19 18:29:20 +02:00
Déborah Servili 0d0ca1e9b5 Update comment 2016-10-13 13:43:57 +02:00
Déborah Servili 22956fbd81 add metadata flag to search 2016-10-13 11:48:17 +02:00
Déborah Servili 9cc55341f0 fix date formatting in mispevent.py + some PEP8 cleaning 2016-10-12 15:40:49 +02:00
Raphaël Vinot ed2be78f4e Avoid validation issue if attribute_count is none 2016-10-11 17:45:38 +02:00
Déborah Servili 3df35826c5 fix flatten 2016-10-11 11:26:57 +02:00
Raphaël Vinot 268598fe23 Add forgotten variable 2016-10-11 11:22:31 +02:00
Raphaël Vinot 78919272ab Use sane_defaults from describeTypes.json if unable to fetch it from the instance. 2016-10-10 12:24:17 +02:00
Raphaël Vinot 8817674dd0 Do not dump an empty list of attrbutes. 2016-10-10 12:23:03 +02:00
Raphaël Vinot b6072f7145 Raise exception if the dest instance is < 2.4.52, set User-Agent. 2016-10-07 16:50:57 +02:00
Raphaël Vinot e91ad63ccf More logical output for _prepare_full_event 2016-10-05 11:43:33 +02:00
Raphaël Vinot 8a931a89f3 Fix upload function 2016-10-05 11:07:40 +02:00
Raphaël Vinot 5ee23d46c0 Make sure all integers are string in the dumped json 2016-09-30 16:06:41 +02:00
Raphaël Vinot dcd76ec5c4 Fix python 2.7 support, add missing test file 2016-09-28 18:50:05 +02:00
Raphaël Vinot 6482a21834 More cleanup 2016-09-28 18:20:37 +02:00
Raphaël Vinot e035922949 Getting closed to a full support of a misp event as a Python Object 2016-09-27 19:47:22 +02:00
Raphaël Vinot cf257493f7 First batch of changes, will be squashed 2016-09-26 00:26:09 +02:00
Hannah Ward f6cf9d9150
Fixed search_index 2016-09-13 13:03:22 +01:00
Raphaël Vinot aef6bbc32d Version bump 2016-09-12 13:09:26 +02:00
Raphaël Vinot bf5793992b Fix examples after removal of MISP XML support 2016-09-12 12:53:58 +02:00
Raphaël Vinot 8059ead9cf Bump to 2.4.51 2016-08-29 11:05:18 +02:00
Raphaël Vinot cd25559c94 Fix flattening, fix python2.7 2016-08-27 18:13:15 +02:00
Raphaël Vinot aaaab590f5 Fix error flattening 2016-08-26 18:22:41 +02:00
Raphaël Vinot 77e3ad0016 Update rendering doc 2016-08-26 14:19:19 +02:00
Raphaël Vinot 32bc8782f0 Add doc 2016-08-26 12:00:13 +02:00
Raphaël Vinot 0b0905d0e7 Update documentation for client side certificate 2016-08-26 09:24:02 +02:00
Richard van den Berg a1a524c2c5 Add ssl client certificate support 2016-08-26 09:11:01 +02:00
Raphaël Vinot cdc77de598 Add some more tests 2016-08-18 13:18:58 +02:00
Raphaël Vinot cdcb1cca5e Update testing 2016-08-18 00:23:49 +02:00
Raphaël Vinot 709770e367 Version bump 2016-08-17 14:51:35 +02:00
Jurriaan Bremer 1ff08c7d73 provide sane defaults for upload-sample/samplelist 
Most of the arguments are unused when a proper event ID has been
provided, hence default them to standard values.
 2016-08-16 18:35:35 +02:00
Jurriaan Bremer 353d04eab3 magic value enumerations 2016-08-16 16:51:35 +02:00
Jurriaan Bremer f23a7c3357 allow multiple attributes to be sent off at once 
Slightly worked out version of the suggestion by doomedraven in #42.
 2016-08-16 11:44:08 +02:00
Thomas King 8ada05f310 Fixed double status code check on helpers and other functions 2016-08-11 19:30:31 +02:00
Raphaël Vinot f19520d5ac Proper support of functions returning plain text instead of json 2016-08-11 17:50:47 +02:00
Raphaël Vinot ab09c0a1dc Fix calls to __prepare_session 
Fix #58
 2016-08-11 17:45:32 +02:00
Raphaël Vinot 2a0d6566ee change: remove XML output, all functions return a Python dictionary. 2016-08-09 13:58:54 +02:00
Richard van den Berg af44760967 Set default distribution for attributes to inherit 2016-08-09 13:31:44 +02:00
Raphaël Vinot 86758cce19 Properly handle errors while fetching the types. 
Fix #53
 2016-08-05 11:13:26 +02:00
Raphaël Vinot cb25177a46 Add option to search function to only return attributes instead of events 2016-08-04 13:21:28 +02:00
Raphaël Vinot 5937ef9e9b Version bump 2016-08-02 15:17:42 +02:00
Raphaël Vinot fd5c22d8d9 Merge branch 'master' of github.com:CIRCL/PyMISP 2016-07-28 09:50:57 +02:00
Raphaël Vinot b8205f11a8 Fix PEP8 2016-07-28 09:50:46 +02:00
Raphaël Vinot f45490b02e Add support for proxies in the library. 
Fix #48
 2016-07-28 09:49:40 +02:00
Kenneth Adam Miller 90b772d938 Caught exception on python3.4 where base64encode returns bytes and not str, and bytes are not json encodable. This caused a failure in upload_sample 2016-07-27 07:30:46 -04:00
Jessy Campos d31ec7a73c Add a method to add a textual detection name under the 'Antivirus detection' category 2016-07-26 13:13:29 -04:00
Nils ca5a4d0960 Fixes: expected bytes, got <class 'str'> in download_samples() 2016-07-21 13:43:04 +02:00
Hannah Ward 414ddaec01
Added STIX retrieval 
- misp.get_stix(event_id=ID, with_attachment=True/False,
			from_date=YYYY-MM-DD, to_date=YYYY-MM-DD,
			tags=["tag1", "tag2"]
	                )
 2016-07-14 12:55:37 +01:00
Raphaël Vinot c97651e6ac Version bump 2016-07-11 18:54:17 +02:00
Raphaël Vinot 51a9725583 Add remove tag method 2016-07-11 17:57:16 +02:00
Déborah Servili 29476b6eba Add examples "create_dummy_event" and "create_massive_dummy_events" 2016-07-01 10:33:44 +02:00
Antonio S 101a274447 Added function to AV detection link 2016-06-28 13:12:37 +02:00
Antonio S b7c7afa4f6 Added add_domain_ip attribute function 2016-06-27 16:53:13 +02:00
Raphaël Vinot a42be22f78 Make pep8 happy 2016-06-15 11:44:08 +09:00
Raphaël Vinot fe8415dbc7 Fix check MISP latest version 2016-06-15 09:44:36 +09:00
Raphaël Vinot 03c2a053f4 Tag version 2.4.48 2016-06-09 14:50:44 +02:00
Alexandre Dulaunoy 11c401bb6a Merge pull request #19 from Delta-Sierra/master 
add function get_tags_statistics
 2016-05-23 15:20:09 +02:00
Déborah Servili d781b4690f add function get_tags_statistics 2016-05-23 15:16:31 +02:00
Alexandre Dulaunoy 70808a46ca File indention fixed 2016-05-19 14:30:43 +02:00
Alexandre Dulaunoy 6fc403f7c8 Merge pull request #18 from Delta-Sierra/master 
add function get_sharing_groups
 2016-05-19 14:29:45 +02:00
Déborah Servili 5108d78f8d add function get_sharing_groups 2016-05-19 14:09:01 +02:00
KevTheHermit 12fa199202 Add Attribute by named category and type 2016-05-05 10:05:59 +01:00
Alexandre Dulaunoy f9ce3999e9 Merge pull request #17 from Delta-Sierra/master 
Add function for sighting using attribute id, uuid or a json file
 2016-04-30 14:52:09 +02:00
Déborah Servili 3cd9ede99f Add function for sighting using attribute id, uuid or a json file 2016-04-29 16:35:27 +02:00
Alexandre Dulaunoy ca382960ef Debug print removed 2016-04-28 14:45:02 +02:00
Déborah Servili 5c23d12f2c add function get_attributes_statistics 2016-04-28 13:29:54 +02:00
Raphaël Vinot ea952a9588 Add 'add_yara' to upload yara rules, increase flexibility of config 
fix #38
 2016-04-20 10:17:31 +02:00
Raphaël Vinot 46396202f5 Update version to v2.4.36 2016-04-15 16:29:47 +02:00
Déborah Servili 089b0a72b0 add comment field in upload_sample 2016-04-15 15:52:50 +02:00
Déborah Servili b94423781c add function add filename 2016-04-15 13:47:13 +02:00
Déborah Servili 369922436e type-category association checking automated 2016-04-14 16:24:37 +02:00
Déborah Servili 25bc301789 removing some unnecessary checks 2016-04-14 14:19:08 +02:00
Déborah Servili c31a1c9799 Merge https://github.com/MISP/PyMISP 2016-04-14 13:29:13 +02:00
Déborah Servili c269913ad3 type-category association checking automated 2016-04-14 10:47:13 +02:00
Déborah Servili d493ff76ba type-category association checking automated 2016-04-14 10:36:32 +02:00
Nick Driver 9e92072f88 Add SSDEEP and FILENAME|SSDEEP support 2016-04-14 10:35:03 +02:00
Nick Driver 887a2b49b1 Add internal reference attributes 2016-04-14 10:35:03 +02:00
Iglocska 7f00da0788 Capitalisation issues 2016-04-06 11:49:19 +02:00
Raphaël Vinot 7be215a732 Ann missing categories in the authorized ones. 2016-04-05 02:03:30 +02:00
Raphaël Vinot 14f05fc9af Revert "Add upload_attachment" 
This reverts commit 6db19ace9e.
 2016-04-04 18:48:27 +02:00
Raphaël Vinot 9920d7686d Revert "Use correct function to upload an attachment" 
This reverts commit 1b7877dd06.
 2016-04-04 18:45:45 +02:00
Raphaël Vinot cb09a19e24 Make PEP8 happy 2016-04-04 18:34:08 +02:00
Raphaël Vinot 1b7877dd06 Use correct function to upload an attachment 
Fix #33
 2016-04-04 18:26:05 +02:00
= 2c134f6154 Designed in same style as search, all attributes can be used 2016-03-31 12:33:04 +01:00
Thomas King c88096ab5d Merge remote-tracking branch 'upstream/master' 
Merging new pymisp changes
 2016-03-31 09:13:04 +01:00
Raphaël Vinot f54e92ab81 Fix pep8 2016-03-24 14:36:30 +01:00
Tristan METAYER 6db19ace9e Add upload_attachment 2016-03-23 14:40:44 +01:00
Raphaël Vinot 6656e63dcc Update version to 2.3 2016-03-21 14:59:39 +01:00
Raphaël Vinot a0c91e5c37 Make pep8 happy 2016-03-21 14:55:41 +01:00
Thomas King 9e8f81aafe Python 2/3 compatible, urllib module 2016-03-18 08:47:30 +00:00
Thomas King c73becee36 Added in searchable indexes, only brings back index and count etc, not results within the index 2016-03-18 08:38:04 +00:00
Alexandre Dulaunoy bc655cedbf Merge pull request #7 from sebdraven/master 
add method change_threat_level
 2016-03-15 18:36:30 +01:00
Sébastien Larinier ba14cf1aaa add method change_threat_level 2016-03-15 17:17:04 +01:00
Thomas King 3c90e25ebd Add threat actor through API, Create new tag 2016-03-14 11:17:53 +00:00
Sébastien Larinier 39c06a7d24 add add_tag method to an event and value 5 to distribution attribute 2016-03-11 16:53:31 +01:00
Sébastien Larinier a67a90d1d3 add method to export txt all attributes by type 2016-03-09 18:37:27 +01:00
Alexandre Dulaunoy 9a241ec547 Remove a small bug introduced by previous commit 2016-03-01 16:20:10 +01:00
Iglocska be242152e7 Script for the upcoming feed generator 
- also some minor modifications to the get_index api
 2016-03-01 15:32:58 +01:00
Raphaël Vinot f968f43bd9 Initial Tags API 2015-12-21 18:58:08 +01:00
Raphaël Vinot a7fc1ceb20 Normalize error messages 2015-12-19 18:18:12 +01:00
Raphaël Vinot a334055749 Add debug option 2015-11-25 09:51:22 +01:00
Raphaël Vinot d1db9a74ee Add add_ipsrc 2015-11-05 09:36:35 +01:00
Raphaël Vinot 588a1abc00 Add basic support for the proposal API 2015-10-30 17:23:25 +01:00
grolinet eadc7ec1b5 Whitespace cleaned 2015-10-06 16:57:28 +02:00
grolinet c9fd4c11cb Helper methods added 2015-10-06 16:52:58 +02:00
unknown e364c3aed7 missing types added 2015-09-30 14:46:25 +02:00
unknown 0256a487b6 missing types added 2015-09-30 14:45:15 +02:00
unknown 17316e349e missing types added 2015-09-30 14:37:18 +02:00
Raphaël Vinot cc8400a9df Improve error handling 2015-09-23 18:47:47 +02:00
Raphaël Vinot 81fa4e5bdd Add test cases (initial) 2015-09-22 15:25:47 +02:00
Raphaël Vinot b4dc6e90b1 Fix typo in categories names 2015-09-22 11:48:23 +02:00
Raphaël Vinot 69f19a8616 Check the MISP instance to query is valid. 
And return a json object from upload_sample.
 2015-09-21 14:40:06 +02:00
Raphaël Vinot 35423ebf2e Force json if nothing else is supported. 2015-09-21 11:52:26 +02:00
Raphaël Vinot f4bf57cc46 Better error handling of no URL/Key are passed 2015-09-18 17:48:10 +02:00
Raphaël Vinot 11b3470167 Add support for downloading unzipped samples. 2015-09-18 14:38:52 +02:00
Raphaël Vinot a7c3d8869c Add version-related methods 2015-09-18 12:03:56 +02:00
Raphaël Vinot d735e6a3d3 Add methods to query the version of MISP (master and local) 2015-09-17 13:51:31 +02:00
Raphaël Vinot 5fea22600e Add publish method 2015-09-17 00:51:45 +02:00
Raphaël Vinot f731b88fde Try to convert event ID to integer if not None. 2015-09-13 00:31:27 +02:00
Raphaël Vinot c133713d33 Fix bug in download sample function. 
Thanks to @kevthehermit
 2015-09-12 23:08:06 +02:00
Raphaël Vinot 22e4d58a50 Timestamp not needed to update an event. 
Fix #18
 2015-09-08 15:25:26 +02:00
Raphaël Vinot 249407c32f Restore python3 support 2015-09-02 13:56:08 +02:00
Raphaël Vinot f50f4acfc0 Cleanup + add helpers for network attributes. 2015-09-02 11:50:15 +02:00
Raphaël Vinot 08e1c40987 Add helpers to update events with specific attributes. 2015-09-01 18:46:10 +02:00
Raphaël Vinot 0d112bea47 Reorganise 2015-09-01 10:31:22 +02:00
Raphaël Vinot c7b03640fb Multiple updates, cleanup 
* Remove attribute (Fix #4)
* Deprecate pure XML API
* Cleanups and fixes in the upload file functionality
 2015-08-28 17:07:30 +02:00
Raphaël Vinot e4d96bd198 Fix download of samples with the new archive format. 2015-08-24 12:05:49 +02:00
Raphaël Vinot 218ffcd915 Add Yara rules download support (by event) 2015-08-19 10:43:03 +02:00
Alexandre Dulaunoy c456538528 events id are integers not strings 2015-08-12 11:23:38 +00:00
Raphaël Vinot eacd82840b Fix bug introduced by using urljoin. 2015-08-10 11:58:20 +02:00
Raphaël Vinot bdd09bfe9a Add sample download 2015-08-07 17:24:03 +02:00
Raphaël Vinot 2ad737e7b7 Add search all 2015-08-06 17:43:12 +02:00
Raphaël Vinot 208091dc47 Fix last commit 2015-08-06 09:49:44 +02:00
Raphaël Vinot dd3591f87c Initial changes to increase flexibility for Viper module 2015-08-06 01:57:59 +02:00
Raphaël Vinot 97dfe2a4f6 Add last param to restSearch + example script 2015-08-05 17:20:59 +02:00
Raphaël Vinot effd8084a7 Cleanup of the upload API 2015-08-05 16:01:57 +02:00
Raphaël Vinot bef354ac44 Preliminary version of the file uploader 2015-08-04 16:24:55 +02:00
Alexandre Dulaunoy e0b781c033 Bug fix: get_index now works properly and return the events index 
An bug was introduced and appending "{}" to the /index url which
gives a 404 on a MISP server.
 2015-07-30 14:20:41 +00:00
Iglocska 507c5a5446 API made a bit more flexible with input data 
- input for add_event() and update_event() can now be a JSON object, JSON string, XML
 2015-07-30 15:53:34 +02:00
Iglocska c315ecaef6 Fix to an issue with using XML as input for add_event() and update_event() 
- also a change to the copy_list.py script to account for the change
 2015-07-30 15:26:05 +02:00
Debra Jules f28c9cdf07 Add 2 download functions of suricata rules events 2015-07-29 15:07:37 +02:00
didelphodon b08d3ab15d Update / Add need a JSON object as data 
... furthermore content-type application was necessary otherwise MISP-REST API refuses to work as expected, at least with my installation.
 2015-06-02 10:40:14 +02:00
Raphaël Vinot b6ff8746bc Make the code python3 friendly 2015-05-03 02:47:47 +02:00
Raphaël Vinot 59254c8246 Use JSON POST to do the search 2015-02-16 14:31:29 +01:00
Raphaël Vinot 3fc24e2e89 Small cleanup, update to 1.0.1 2014-05-02 17:10:22 +02:00
Raphaël Vinot f2c7bbe5c9 Add installer, proper copy script 2014-04-16 15:14:58 +02:00
Raphaël Vinot 24f2fab134 Add support for self-signed certificate. 
Add comments
 2014-04-16 14:09:56 +02:00
Raphaël Vinot 8f477cc802 add search by organisation 2014-04-15 16:40:49 +02:00
Raphaël Vinot 07b66ad05f add export-import of a list 2014-04-14 19:18:12 +02:00
Raphaël Vinot 93ddd4cf50 cleanup style 2014-04-14 10:55:20 +02:00
Raphaël Vinot ac482e8f00 support xml and json copy 2014-04-12 17:44:47 +02:00
Raphaël Vinot 0ff70618e8 Delete export_import.py 2014-04-12 17:04:05 +02:00
Raphaël Vinot b53dac7773 fix event_add, add example 2014-04-12 16:17:36 +02:00
Raphaël Vinot 483f7839c0 make the API a class 2014-04-11 18:45:52 +02:00
Raphaël Vinot acb6384bfb json export is not supported everywhere 2014-03-28 18:04:28 +01:00
Raphaël Vinot a920333544 some testing 2014-03-20 11:10:52 +01:00
Raphaël Vinot b27bb44e61 initial commit 2014-03-19 19:10:36 +01:00