MISP
/
PyMISP
mirror of https://github.com/MISP/PyMISP
2
0
Fork 0
Code Issues Releases Wiki Activity
2,134 Commits
13 Branches
168 Tags
94 MiB
Commit Graph

481 Commits (d39d4caf7d76e47299405a007bb23484cb143d1e)

Author SHA1 Message Date
DragonDev1906 5c72dc9c33 dded get_object & get_attribute 2018-12-06 14:26:23 +01:00
Tom King d3f38ce092 chg: Support for Payload Delivery > Other attribute as PyMISP function 2018-11-28 14:27:16 +00:00
Dawid Czarnecki 7ea50075e4 chg: Include proposals in attributes search 
Add includeProposals param to the search method
 2018-11-28 10:05:26 +01:00
Raphaël Vinot 0770a15659 new: search_index in ExpandedPyMISP, cleanup, update jupyter 2018-11-22 14:29:07 +01:00
Raphaël Vinot 3113fcad55 chg: Fixes & update Jupyter 2018-11-20 01:39:20 +01:00
Raphaël Vinot 2c0da24437 new: Add log search 2018-11-20 01:21:06 +01:00
Raphaël Vinot 47229077f0 Merge branch 'master' of github.com:MISP/PyMISP 2018-11-09 10:56:08 +01:00
Raphaël Vinot bc8a397752 new: change_distribution method 
Fix: #294
 2018-11-09 10:55:27 +01:00
Nils Kuhnert a92e2a2d43
Fixes date parameters for search_index() function 2018-11-08 08:51:20 +01:00
Raphaël Vinot 8d33e20721 new: Add test cases for sightings, cleanup 2018-10-31 16:42:01 +01:00
Sami Mokaddem 7975c03774 new: [sighting] Added support of sighting REST API 2018-10-23 18:23:11 +02:00
Raphaël Vinot 220b7bffff new: direct_call without data means GET 2018-10-09 14:44:07 +02:00
Raphaël Vinot 6bf904f6ce chg: allow to pass a json string to direct_call 2018-10-09 14:28:50 +02:00
Raphaël Vinot af56ab6bb8 fix: direct call & add example 2018-10-09 14:19:07 +02:00
Raphaël Vinot 9a2610a61f chg: More test cases 2018-10-05 17:45:12 +02:00
netjinho 2fa56348e5 Fixed leaked taxonomy tags problem 2018-10-04 19:31:46 +02:00
netjinho cda68b3f44 Added some getters and setters for taxonomies, warninglists, noticelists and tags & documentation 2018-10-04 19:03:24 +02:00
Raphaël Vinot 1445a9908d new: Add direct call to just post data on a URL 2018-10-04 09:19:48 +02:00
Raphaël Vinot 1e7f7b783e Merge branch 'master' of https://github.com/netjinho/PyMISP into netjinho-master 2018-09-29 15:17:17 -04:00
netjinho ef087a9572 Added update_galaxies and update_taxonomies 2018-09-28 18:14:27 +02:00
root e3bd073be6 add: Advanced Extraction to upload_sample 2018-09-28 17:43:19 +02:00
Raphaël Vinot 6cee5ee66f add: update noticelists and object templates 2018-09-25 11:15:38 -04:00
Raphaël Vinot b95fdf9218 new: Update warninglists 2018-09-25 10:32:32 -04:00
Steffen Sauler d8ef2559c6
Fix #270 uniquely identifying sample 2018-09-05 15:29:26 +02:00
Raphaël Vinot f4c0b92305 fix: jerry rig support for old python 2018-08-28 16:30:34 -04:00
Raphaël Vinot 981e08a9ae new: Add helpers for new server related APIs 
Fix #266
 2018-08-26 23:41:59 -04:00
Sami Mokaddem 06b829e781 new: [usersStats] Possibility to fetch users/statistics data for all 
context (usage, org, tags, ...)
 2018-08-13 12:10:15 +02:00
Alexandre Dulaunoy 6aafda171a
Merge pull request #251 from tomking2/master 
chg: Added email-header attribute
 2018-08-09 22:55:51 +02:00
Raphaël Vinot fcb83f7318 new: Reworking the REST API (WiP) 2018-08-09 18:12:05 +02:00
Raphaël Vinot 3b42497967 fix: Opening the json blobs as bytes was buggy 2018-08-08 10:18:51 +02:00
Raphaël Vinot e2ddb48f18 chg: Open all json files as bytes before loading in json 2018-08-07 16:52:50 +02:00
Raphaël Vinot c2320404dd fix: Allow boolean parameters in search_index 2018-07-16 15:01:50 +02:00
Raphaël Vinot a81d2574fe fix: Bad URL in get_attachment 
Fix #240
 2018-07-16 13:46:29 +02:00
Tom King 10e880a469 chg: Added email-header attribute 2018-07-12 11:12:48 +01:00
Tobias Mainka 23b16e96b2 enabled published search parameter for attributes controler 2018-06-28 10:43:21 +02:00
Paul Stark e956860449 new:Add the ability to add Other attributes via the API 2018-06-20 09:54:00 -04:00
Steffen Sauler 26fa04428d
Added unzip-flag 
added: download_samples(..., unzip=True)
 2018-06-12 16:16:40 +02:00
Xavier Mehrenberger a5800f84db
chg: fix sample retrieval from new-style zips 2018-06-08 10:47:08 +02:00
Raphaël Vinot 558c692920 chg: Raise an exception if the response is not in JSON 2018-06-07 11:13:51 +02:00
Raphaël Vinot 977400b544 fix: index out of range in add_object 2018-06-05 17:37:49 +02:00
iso 20a3404144 fix: Correct docstring of search method 2018-06-03 22:54:27 +09:00
Raphaël Vinot 8c4889cc69 Fix issue when adding multiple attributes and the instance is too slow. 
Fix: https://github.com/MISP/MISP/issues/3293
 2018-05-30 15:41:09 +02:00
Raphaël Vinot c99fef2129 fix: Response data type mismatch in _send_attributes() 
Fix #206
 2018-05-30 15:27:20 +02:00
Raphaël Vinot e7359504f3 new: Add edit_object, simplify add_object 2018-05-08 11:43:27 +02:00
Raphaël Vinot e568a0cf00 fix: Typo in the *feed methods 2018-04-26 14:43:21 +02:00
Raphaël Vinot 21f1a64293 chg: normalize the RestResponse calls. 2018-04-25 16:44:00 +02:00
Raphaël Vinot c89d70140d new: Add more feed management methods 
Fix #221
 2018-04-25 11:06:07 +02:00
Raphaël Vinot 36e7e5aedd new: Add update_attribute method 2018-04-21 16:29:38 +02:00
Raphaël Vinot 5ca97d165c new: Add event_timestamp to REST search 
Fix #220
 2018-04-12 10:43:21 +02:00
Paul Stark 43f167d934 Add the ability to add an Autonomous System(AS) via the API 2018-03-30 11:33:30 -04:00
Raphaël Vinot 0a4860b481
Merge pull request #210 from mlodic/master 
added change_analysis_status API
 2018-03-27 10:04:02 +02:00
user 1503508c16 Fix add_named_attribute regression, update add_named_attribute.py example 2018-03-26 17:37:02 +02:00
Raphaël Vinot 9e44ec6616 fix: Properly create fail2ban object 2018-03-26 17:03:16 +02:00
Matteo Lodi 84adf0f708 added change_analysis_status API 2018-03-26 16:38:26 +02:00
Richard van den Berg 079048545c Point to right anchor for client side certificates 2018-02-26 17:04:38 +01:00
ANSSI-BSO-D 9087768b1d
add search on sighting 
added the possibility to search sightings : 
Here some example : 
```python
print(misp.sighting_list(424242))
```
The answer will give a sighting list corresponding to the attribute 424242.
```python
print(misp.sighting_list(element_id=42, org_id=2, scope=event))
```
The return will be a sighting list of event 42 with a filter for organisation 2.
 2018-02-21 15:12:26 +01:00
Raphaël Vinot cd6b596574 new: APIs to manage sharing groups 
Fix #185
 2018-02-13 11:25:05 +01:00
Raphaël Vinot 3e8e588846 new: returnMetaAttributes flag for freeTextImport API 
Fix #188
 2018-02-13 10:50:51 +01:00
Raphaël Vinot 05bbfac658 fix: Encode string in _encode_file_to_upload 2018-01-29 10:30:37 +01:00
Raphaël Vinot 837372cf3e fix: Allow to pass value, UUID, or ID to a sighting. 2018-01-25 16:24:24 +01:00
Raphaël Vinot 076393d55e add: Allow to fetch warninglists 
Fix #180
 2018-01-25 16:02:58 +01:00
Kory Kyzar 914ac84194 Linting 2018-01-19 15:44:10 -06:00
Kory Kyzar c797f4dfc4 Bug fix 2018-01-19 13:46:04 -06:00
Kory Kyzar 788a7842fa Change in add_attachment. Allow explicit attachment naming 2018-01-19 13:27:49 -06:00
Armīns Palms 9158985f3f Change in new_tag function. Added attributie 'hide_tag' 2018-01-19 16:57:40 +02:00
Armīns Palms aaf18fa3c8 Change the comment of attribute 2018-01-18 15:17:52 +02:00
Raphaël Vinot c862800df2 fix: add_hashes was broken 
Fix #174
 2018-01-12 18:47:50 +01:00
Raphaël Vinot baa617aae4 fix: Download old samples was broken. 2018-01-10 23:39:27 +01:00
AninaAntonie 72597c1b8a
set_sightings 
Maybe I didn't use it correctly but the method set_sightings didn't work for me. It's working now but I'm not sure whether sending a request for every sighting in the list is the best solution.
 2017-12-28 10:17:57 +01:00
Raphaël Vinot 8013e90e40 fix: Typo in set_sightings 
Fix #161
 2017-12-27 14:25:12 +01:00
Raphaël Vinot 4708786959 chg: Add MISPSighting class. 2017-12-26 17:13:57 +01:00
Raphaël Vinot e8e13f3218 chg: Update documentation 2017-12-22 17:22:07 +01:00
Raphaël Vinot a497613a85 chg: Update documentation, cleanup 2017-12-22 14:49:14 +01:00
Raphaël Vinot 9e9bad731d new: Add last field to get_csv 2017-12-21 17:25:12 +01:00
Raphaël Vinot 892ebbf077 chg: Add __repr__ methods (fix last commit) 2017-12-15 17:34:54 +01:00
Raphaël Vinot 19a50a7ba7 chg: Use new format for filtering. 2017-12-14 11:06:52 +01:00
Raphaël Vinot 6db31b397a new: Add methods to get taxonomy(ies) 
Thanks to @truckydev
 2017-12-13 16:43:21 +01:00
Raphaël Vinot 6c4e2b2861
Merge pull request #150 from sdrees/first-friendly-contribution-enhance-coverage 
First friendly contribution enhance coverage
 2017-12-13 15:47:43 +01:00
Raphaël Vinot 5cbcc09d7d new: Add method to get all the events modified in an interval 2017-12-11 15:01:25 +01:00
Raphaël Vinot 9f8f15fb2b Merge branch 'get_last_modified_event' of https://github.com/truckydev/PyMISP into truckydev-get_last_modified_event 2017-12-11 14:03:37 +01:00
Stefan Hagen (Individual) e7f395a92c enhance coverage and fix en passant with focus on api 2017-12-11 14:00:43 +01:00
StrayLightning 748be6a093 Improve the exception message for a server 500+ response with no response content 2017-12-05 18:04:11 +00:00
StrayLightning 8a8b0c113d Check for zero-length 500 response from the server and produce a suitable error message 
In experimenting with PyMISP I am triggering problems on the server I
am using.  Occasionally the server will return a 500 response with a
message indicating an internal error, but more often than not it returns
a 500 response with no contents, and _check_response falls over itself,
generating hard-to-fathom exception from the json internals.

This commit hardens _check_response by detecting zero-length responses
and raising a suitable exception.

Also fix a missing bracket in one of the subsequent exception strings.
 2017-12-05 17:44:15 +00:00
Raphaël Vinot 5e931ffde7
Merge pull request #144 from c-goes/objects_delete 
allow deletion of objects and object references
 2017-12-02 21:36:44 +01:00
Raphaël Vinot be65733d73 chg: Do not get the event from the server before publishing if PyMISP.publish gets an ID 2017-12-01 16:47:06 +01:00
Raphaël Vinot f4439ae970 chg: Add live tests for recommended pymisp version and describeTypes up-to-date 2017-12-01 16:15:46 +01:00
Raphaël Vinot 9a2b82a2ae chg: Add a way to check if the ACL is up-to-date 2017-12-01 14:35:19 +01:00
Raphaël Vinot eb5cf6c06c chg: Add validators for describeTypes on the live instance 2017-12-01 14:02:04 +01:00
Raphaël Vinot 9c7923fe0a new: Add get CSV method. 2017-12-01 12:01:42 +01:00
Tristan METAYER 60f3111f47 - Correction for 'last' param. 
'last' gives the latest events that have been published
- add get_events_last_modified()
this function returns the modified events based on timestamp
 2017-11-29 16:46:41 +01:00
c-goes 4416fe30b1 allow deletion of objects and object references 2017-11-23 17:51:04 +01:00
3c7 069023e802 Adding multiple named attributes require a single POST request now 2017-11-22 14:57:11 +01:00
c-goes 2e5fcf4e31 fixed typo 2017-11-20 15:11:30 +01:00
Steve Clement 89a5558014 - Remove CIRCL reference from README.md 
- Updated 2 bad indentations where epydoc was Warning
 2017-11-19 10:02:03 +01:00
Raphaël Vinot 44831b1fdb chg: Add new objects: MISPUser and MISPOrganisation 2017-11-17 16:51:46 +01:00
Raphaël Vinot b1262a0c96 chg: Add fast publish method 
Fix #86
 2017-11-10 15:42:07 -08:00
Raphaël Vinot 55b4064a57 chg: Improve documentation 
Fix #121
 2017-11-10 14:56:53 -08:00
Raphaël Vinot f54a029e2a new: Proper debug system 
Make it easy to investigate the json blobs sent to the server.
 2017-11-08 17:33:55 -08:00
Raphaël Vinot 4512a4eaca chg: small improvments in the logging system 2017-11-07 19:10:54 -08:00
Raphaël Vinot f1a88f460e fix: Typo loger -> logger 2017-11-07 18:19:57 -08:00
Raphaël Vinot 134df0cafb chg: Properly use python logging module. 2017-11-07 18:10:04 -08:00
Raphaël Vinot e5a7153284 fix: Properly pass the distribution when uploading a sample 
Fix: https://github.com/MISP/PyMISP/issues/129
 2017-11-01 17:26:58 -07:00
Raphaël Vinot 4b53b399d0 fix: Properly upload a sample in an existing event. 
Fix https://github.com/MISP/PyMISP/issues/123
 2017-11-01 17:15:49 -07:00
Raphaël Vinot 7ece6b7fbc fix: Properly set the distribution at event level 
fix #120
 2017-10-28 17:09:11 -04:00
Raphaël Vinot 30da658292 chg: Remove warning if PyMISP is too new 2017-10-28 16:57:03 -04:00
Raphaël Vinot 4c4cd23983 chg: Allow to hard delete an attribute by ID. 2017-10-22 14:02:47 -04:00
Raphaël Vinot 45684cfd5f chg: Update comments 2017-10-21 20:22:38 +02:00
tssbo82 8032e5f06d Added **kwargs to add_named_attribute call in add_attachment 2017-10-09 15:54:20 -04:00
Raphaël Vinot b1989f16f2 Merge branch 'objects' 2017-09-18 11:43:48 +01:00
Raphaël Vinot da2b28a927 Use MISPAbstract as a master class everywhere. 
This is probably breaking everything.... ¯\_(ツ)_/¯
 2017-09-12 16:46:06 +02:00
Raphaël Vinot f66af15c62 Update get_template_id, cleanup 2017-08-25 09:45:56 +02:00
Raphaël Vinot c09ce0032c Refactor all the things 
Add script for MISP core, make everything generic.
 2017-08-24 19:21:52 +02:00
Raphaël Vinot 314f7eaed1 Re-enable python < 3.5 support. 2017-08-23 16:55:32 +02:00
Raphaël Vinot 77845bd813 Update file/pe/pe-sections objects creator. 2017-08-23 15:37:04 +02:00
Raphaël Vinot 6d06b77d76 Improve event ID detection in publish method 2017-08-04 19:30:40 +02:00
Raphaël Vinot 57778d2b0b Merge branch 'patch-8' of https://github.com/Deventual/PyMISP into Deventual-patch-8 2017-08-04 19:17:26 +02:00
Hannah Ward 394c312d0d
new: Add ZMQ publishing method 2017-08-03 16:17:37 +01:00
Deventual a9d4ab829b Update api.py 2017-08-03 14:22:48 +03:00
Deventual c8d962a594 Implemented much faster publish method to replace the old one 
new publish method that is less resourceful and also having the ability to send emails (same as the web interface).
The method depends on the publish misp api method instead of update.
 2017-08-03 14:19:48 +03:00
Raphaël Vinot 533b69d944 Update path to roles API 2017-07-31 17:28:47 +02:00
Raphaël Vinot 622a5701ee Fix typo in variable name. 2017-07-27 17:14:49 +02:00
Raphaël Vinot 2fd3b05202 Update accordingly to the current server implementation 2017-07-24 17:16:40 +02:00
Sebastian Wagner 5a85788c5d
Fix shebangs and executable permissions 
Files containing a shebang should be executable (examples/*.py)
Non-executable files should not contain a shebang (pymisp/...)

spotted with rpmlint
 2017-07-24 13:27:28 +02:00
Raphaël Vinot 78488db7aa Initial commit supporting MISP Objects 2017-07-21 20:34:56 +02:00
Raphaël Vinot 14fcc5f586 Fix typo in the method name 2017-07-21 15:16:00 +02:00
Raphaël Vinot 5f94ad3104 Add test of the authkey, update warnings. 2017-07-20 15:33:15 +02:00
Raphaël Vinot fe829b8f4d Search paramaters validation. 
Fix #96
 2017-07-18 12:07:47 +02:00
Raphaël Vinot 59f9b37b5e Allow to pass a bytestream to upload_sample. 
Fix #101
 2017-07-18 11:26:09 +02:00
Raphaël Vinot af636812fd Fix get_attachment. 
Fix #105
 2017-07-18 10:55:49 +02:00
Raphaël Vinot ae40bf5d1b Allow to list roles and tags on a MISP instance 2017-07-15 20:35:58 +02:00
Raphaël Vinot c91849b468 Improve errors flattening 2017-07-15 20:35:00 +02:00
Alex Bolshakov 8b0c379b7f Add handling a string response 
To avoid AttributeError when variable to_return is a string with a value "Pull queued for background execution."
 2017-07-12 12:51:26 +03:00
Raphaël Vinot a0273b8a43 Merge branch 'master' of github.com:CIRCL/PyMISP 2017-07-11 16:15:59 +02:00
obsidianpentesting c18d5cac6d Simple function to cache all feeds at once. This is almost identical to fetch_feed. In the future, I would like to specify the scope to include other values. 2017-07-06 16:06:59 -05:00
raw-data 6139caae2f exposing more feeds functions (for which _isRest() is available) to the API 2017-07-03 21:56:44 +01:00
Raphaël Vinot e8caa6a7b1 Merge pull request #102 from aparriel/debug-fix 
Fix missing %s in debug
 2017-06-13 16:04:46 +02:00
Raphaël Vinot 72a484ca32 Add support for freetext import in the API. 2017-06-13 15:37:39 +02:00
aparriel 72382f7618 Fix missing %s in debug 
Missing %s in logger.debug call lead to error.
 2017-05-31 18:07:31 +02:00
CheYenBzh 01770aa51e Add function to fetch all events from a feed 
Function takes the feed id as argument (-f).
 2017-05-29 13:57:02 +02:00
George 0bdef56001 Fix not_values type check in __prepare_rest_search 2017-05-19 18:19:21 +02:00
Hannah Ward a7892c03ff
fix: Don't even bother trying with futuressession if Async isn't ok 
fixes #85
 2017-05-16 10:27:54 +01:00
Raphaël Vinot 619cb10403 Cleanup warning function 2017-05-03 16:52:57 +02:00
Raphaël Vinot 8b3d17c5d0 Fix typos 2017-05-03 16:49:51 +02:00
Raphaël Vinot e76f19e793 Merge pull request #83 from bernhl/fix_api_version_check 
Fix checks of recommended version
 2017-05-03 15:57:42 +02:00
Raphaël Vinot ba6568eb46 Merge branch 'master' into logging 2017-05-03 15:42:01 +02:00
Lukas Bernhard 3e4e76c21e Fix checks of recommended version 2017-05-03 14:49:16 +02:00
fluxas 0bee414592 Use logging instead of print; deprecate debug param 2017-05-03 14:14:13 +02:00
fluxas 6ec2513184 Add exception types to api.py 2017-05-03 13:22:15 +02:00
Hannah Ward e5f9c0b704
new: Enable async option for search() 2017-05-03 10:13:18 +01:00
Hannah Ward d2b0c506a4
Merge branch 'master' of github.com:MISP/PyMISP 2017-05-03 09:47:44 +01:00