MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #852 from Delta-Sierra/main 

add Parties/Observers to the Budapest Convention
pull/853/head
Alexandre Dulaunoy 2023-06-19 14:50:20 +02:00 committed by GitHub
parent 734d57edf5 baf5bfe5cc
commit f60c2def4f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 121 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

90
clusters/country.json
View File

@ -20,6 +20,7 @@
"ISO3": "AND",
"Languages": "ca",
"Population": "84000",
"budapest-convention": "parties",
"tld": ".ad"
},
"related": [
@ -130,6 +131,7 @@
"ISO3": "ALB",
"Languages": "sq,el",
"Population": "2986952",
"budapest-convention": "parties",
"tld": ".al"
},
"related": [
@ -152,6 +154,7 @@
"ISO3": "ARM",
"Languages": "hy",
"Population": "2968000",
"budapest-convention": "parties",
"tld": ".am"
},
"related": [
@ -218,6 +221,7 @@
"ISO3": "ARG",
"Languages": "es-AR,en,it,de,fr,gn",
"Population": "41343201",
"budapest-convention": "parties",
"tld": ".ar"
},
"related": [
@ -262,6 +266,7 @@
"ISO3": "AUT",
"Languages": "de-AT,hr,hu,sl",
"Population": "8205000",
"budapest-convention": "parties",
"tld": ".at"
},
"related": [
@ -284,6 +289,7 @@
"ISO3": "AUS",
"Languages": "en-AU",
"Population": "21515754",
"budapest-convention": "parties",
"tld": ".au"
},
"related": [
@ -350,6 +356,7 @@
"ISO3": "AZE",
"Languages": "az,ru,hy",
"Population": "8303512",
"budapest-convention": "parties",
"tld": ".az"
},
"related": [
@ -372,6 +379,7 @@
"ISO3": "BIH",
"Languages": "bs,hr-BA,sr-BA",
"Population": "4590000",
"budapest-convention": "parties",
"tld": ".ba"
},
"related": [
@ -438,6 +446,7 @@
"ISO3": "BEL",
"Languages": "nl-BE,fr-BE,de-BE",
"Population": "10403000",
"budapest-convention": "parties",
"tld": ".be"
},
"related": [
@ -460,6 +469,7 @@
"ISO3": "BFA",
"Languages": "fr-BF,mos",
"Population": "16241811",
"budapest-convention": "observers",
"tld": ".bf"
},
"related": [
@ -482,6 +492,7 @@
"ISO3": "BGR",
"Languages": "bg,tr-BG,rom",
"Population": "7000039",
"budapest-convention": "parties",
"tld": ".bg"
},
"related": [
@ -548,6 +559,7 @@
"ISO3": "BEN",
"Languages": "fr-BJ",
"Population": "9056010",
"budapest-convention": "observers",
"tld": ".bj"
},
"related": [
@ -680,6 +692,7 @@
"ISO3": "BRA",
"Languages": "pt-BR,es,en,fr",
"Population": "201103330",
"budapest-convention": "parties",
"tld": ".br"
},
"related": [
@ -834,6 +847,7 @@
"ISO3": "CAN",
"Languages": "en-CA,fr-CA,iu",
"Population": "33679000",
"budapest-convention": "parties",
"tld": ".ca"
},
"related": [
@ -944,6 +958,7 @@
"ISO3": "CHE",
"Languages": "de-CH,fr-CH,it-CH,rm",
"Population": "8484100",
"budapest-convention": "parties",
"tld": ".ch"
},
"related": [
@ -966,6 +981,7 @@
"ISO3": "CIV",
"Languages": "fr-CI",
"Population": "21058798",
"budapest-convention": "observers",
"tld": ".ci"
},
"related": [
@ -1010,6 +1026,7 @@
"ISO3": "CHL",
"Languages": "es-CL",
"Population": "16746491",
"budapest-convention": "parties",
"tld": ".cl"
},
"related": [
@ -1032,6 +1049,7 @@
"ISO3": "CMR",
"Languages": "en-CM,fr-CM",
"Population": "19294149",
"budapest-convention": "observers",
"tld": ".cm"
},
"related": [
@ -1076,6 +1094,7 @@
"ISO3": "COL",
"Languages": "es-CO",
"Population": "47790000",
"budapest-convention": "parties",
"tld": ".co"
},
"related": [
@ -1098,6 +1117,7 @@
"ISO3": "CRI",
"Languages": "es-CR,en",
"Population": "4516220",
"budapest-convention": "parties",
"tld": ".cr"
},
"related": [
@ -1142,6 +1162,7 @@
"ISO3": "CPV",
"Languages": "pt-CV",
"Population": "508659",
"budapest-convention": "parties",
"tld": ".cv"
},
"related": [
@ -1208,6 +1229,7 @@
"ISO3": "CYP",
"Languages": "el-CY,tr-CY,en",
"Population": "1102677",
"budapest-convention": "parties",
"tld": ".cy"
},
"related": [
@ -1230,6 +1252,7 @@
"ISO3": "CZE",
"Languages": "cs,sk",
"Population": "10476000",
"budapest-convention": "parties",
"tld": ".cz"
},
"related": [
@ -1252,6 +1275,7 @@
"ISO3": "DEU",
"Languages": "de",
"Population": "81802257",
"budapest-convention": "parties",
"tld": ".de"
},
"related": [
@ -1296,6 +1320,7 @@
"ISO3": "DNK",
"Languages": "da-DK,en,fo,de-DK",
"Population": "5484000",
"budapest-convention": "parties",
"tld": ".dk"
},
"related": [
@ -1340,6 +1365,7 @@
"ISO3": "DOM",
"Languages": "es-DO",
"Population": "9823821",
"budapest-convention": "parties",
"tld": ".do"
},
"related": [
@ -1384,6 +1410,7 @@
"ISO3": "ECU",
"Languages": "es-EC",
"Population": "14790608",
"budapest-convention": "observers",
"tld": ".ec"
},
"related": [
@ -1406,6 +1433,7 @@
"ISO3": "EST",
"Languages": "et,ru",
"Population": "1291170",
"budapest-convention": "parties",
"tld": ".ee"
},
"related": [
@ -1494,6 +1522,7 @@
"ISO3": "ESP",
"Languages": "es-ES,ca,gl,eu,oc",
"Population": "46505963",
"budapest-convention": "parties",
"tld": ".es"
},
"related": [
@ -1538,6 +1567,7 @@
"ISO3": "FIN",
"Languages": "fi-FI,sv-FI,smn",
"Population": "5244000",
"budapest-convention": "parties",
"tld": ".fi"
},
"related": [
@ -1560,6 +1590,7 @@
"ISO3": "FJI",
"Languages": "en-FJ,fj",
"Population": "875983",
"budapest-convention": "observers",
"tld": ".fj"
},
"related": [
@ -1648,6 +1679,7 @@
"ISO3": "FRA",
"Languages": "fr-FR,frp,br,co,ca,eu,oc",
"Population": "64768389",
"budapest-convention": "parties",
"tld": ".fr"
},
"related": [
@ -1692,6 +1724,7 @@
"ISO3": "GBR",
"Languages": "en-GB,cy-GB,gd",
"Population": "62348447",
"budapest-convention": "parties",
"tld": ".uk"
},
"related": [
@ -1736,6 +1769,7 @@
"ISO3": "GEO",
"Languages": "ka,ru,hy,az",
"Population": "4630000",
"budapest-convention": "parties",
"tld": ".ge"
},
"related": [
@ -1802,6 +1836,7 @@
"ISO3": "GHA",
"Languages": "en-GH,ak,ee,tw",
"Population": "24339838",
"budapest-convention": "parties",
"tld": ".gh"
},
"related": [
@ -1956,6 +1991,7 @@
"ISO3": "GRC",
"Languages": "el-GR,en,fr",
"Population": "11000000",
"budapest-convention": "parties",
"tld": ".gr"
},
"related": [
@ -2000,6 +2036,7 @@
"ISO3": "GTM",
"Languages": "es-GT",
"Population": "13550440",
"budapest-convention": "observers",
"tld": ".gt"
},
"related": [
@ -2154,6 +2191,7 @@
"ISO3": "HRV",
"Languages": "hr-HR,sr",
"Population": "4284889",
"budapest-convention": "parties",
"tld": ".hr"
},
"related": [
@ -2198,6 +2236,7 @@
"ISO3": "HUN",
"Languages": "hu-HU",
"Population": "9982000",
"budapest-convention": "parties",
"tld": ".hu"
},
"related": [
@ -2242,6 +2281,7 @@
"ISO3": "IRL",
"Languages": "en-IE,ga-IE",
"Population": "4622917",
"budapest-convention": "observers",
"tld": ".ie"
},
"related": [
@ -2264,6 +2304,7 @@
"ISO3": "ISR",
"Languages": "he,ar-IL,en-IL,",
"Population": "7353985",
"budapest-convention": "parties",
"tld": ".il"
},
"related": [
@ -2396,6 +2437,7 @@
"ISO3": "ISL",
"Languages": "is,en,de,da,sv,no",
"Population": "308910",
"budapest-convention": "parties",
"tld": ".is"
},
"related": [
@ -2418,6 +2460,7 @@
"ISO3": "ITA",
"Languages": "it-IT,de-IT,fr-IT,sc,ca,co,sl",
"Population": "60340328",
"budapest-convention": "parties",
"tld": ".it"
},
"related": [
@ -2506,6 +2549,7 @@
"ISO3": "JPN",
"Languages": "ja",
"Population": "127288000",
"budapest-convention": "parties",
"tld": ".jp"
},
"related": [
@ -2682,6 +2726,7 @@
"ISO3": "KOR",
"Languages": "ko-KR,en",
"Population": "48422644",
"budapest-convention": "observers",
"tld": ".kr"
},
"related": [
@ -2770,6 +2815,7 @@
"ISO3": "KAZ",
"Languages": "kk,ru",
"Population": "15340000",
"budapest-convention": "observers",
"tld": ".kz"
},
"related": [
@ -2858,6 +2904,7 @@
"ISO3": "LIE",
"Languages": "de-LI",
"Population": "35000",
"budapest-convention": "parties",
"tld": ".li"
},
"related": [
@ -2880,6 +2927,7 @@
"ISO3": "LKA",
"Languages": "si,ta,en",
"Population": "21513990",
"budapest-convention": "parties",
"tld": ".lk"
},
"related": [
@ -2946,6 +2994,7 @@
"ISO3": "LTU",
"Languages": "lt,ru,pl",
"Population": "2944459",
"budapest-convention": "parties",
"tld": ".lt"
},
"related": [
@ -2968,6 +3017,7 @@
"ISO3": "LUX",
"Languages": "lb,de-LU,fr-LU",
"Population": "497538",
"budapest-convention": "parties",
"tld": ".lu"
},
"related": [
@ -2990,6 +3040,7 @@
"ISO3": "LVA",
"Languages": "lv,ru,lt",
"Population": "2217969",
"budapest-convention": "parties",
"tld": ".lv"
},
"related": [
@ -3034,6 +3085,7 @@
"ISO3": "MAR",
"Languages": "ar-MA,ber,fr",
"Population": "33848242",
"budapest-convention": "parties",
"tld": ".ma"
},
"related": [
@ -3056,6 +3108,7 @@
"ISO3": "MCO",
"Languages": "fr-MC,en,it",
"Population": "32965",
"budapest-convention": "parties",
"tld": ".mc"
},
"related": [
@ -3078,6 +3131,7 @@
"ISO3": "MDA",
"Languages": "ro,ru,gag,tr",
"Population": "4324000",
"budapest-convention": "parties",
"tld": ".md"
},
"related": [
@ -3100,6 +3154,7 @@
"ISO3": "MNE",
"Languages": "sr,hu,bs,sq,hr,rom",
"Population": "666730",
"budapest-convention": "parties",
"tld": ".me"
},
"related": [
@ -3188,6 +3243,7 @@
"ISO3": "MKD",
"Languages": "mk,sq,tr,rmm,sr",
"Population": "2062294",
"budapest-convention": "parties",
"tld": ".mk"
},
"related": [
@ -3386,6 +3442,7 @@
"ISO3": "MLT",
"Languages": "mt,en-MT",
"Population": "403000",
"budapest-convention": "parties",
"tld": ".mt"
},
"related": [
@ -3408,6 +3465,7 @@
"ISO3": "MUS",
"Languages": "en-MU,bho,fr",
"Population": "1294104",
"budapest-convention": "parties",
"tld": ".mu"
},
"related": [
@ -3474,6 +3532,7 @@
"ISO3": "MEX",
"Languages": "es-MX",
"Population": "112468855",
"budapest-convention": "observers",
"tld": ".mx"
},
"related": [
@ -3584,6 +3643,7 @@
"ISO3": "NER",
"Languages": "fr-NE,ha,kr,dje",
"Population": "15878271",
"budapest-convention": "observers",
"tld": ".ne"
},
"related": [
@ -3628,6 +3688,7 @@
"ISO3": "NGA",
"Languages": "en-NG,ha,yo,ig,ff",
"Population": "154000000",
"budapest-convention": "parties",
"tld": ".ng"
},
"related": [
@ -3672,6 +3733,7 @@
"ISO3": "NLD",
"Languages": "nl-NL,fy-NL",
"Population": "16645000",
"budapest-convention": "parties",
"tld": ".nl"
},
"related": [
@ -3694,6 +3756,7 @@
"ISO3": "NOR",
"Languages": "no,nb,nn,se,fi",
"Population": "5009150",
"budapest-convention": "parties",
"tld": ".no"
},
"related": [
@ -3782,6 +3845,7 @@
"ISO3": "NZL",
"Languages": "en-NZ,mi",
"Population": "4252277",
"budapest-convention": "observers",
"tld": ".nz"
},
"related": [
@ -3826,6 +3890,7 @@
"ISO3": "PAN",
"Languages": "es-PA,en",
"Population": "3410676",
"budapest-convention": "parties",
"tld": ".pa"
},
"related": [
@ -3848,6 +3913,7 @@
"ISO3": "PER",
"Languages": "es-PE,qu,ay",
"Population": "29907003",
"budapest-convention": "parties",
"tld": ".pe"
},
"related": [
@ -3914,6 +3980,7 @@
"ISO3": "PHL",
"Languages": "tl,en-PH,fil,ceb,tgl,ilo,hil,war,pam,bik,bcl,pag,mrw,tsg,mdh,cbk,krj,sgd,msb,akl,ibg,yka,mta,abx",
"Population": "99900177",
"budapest-convention": "parties",
"tld": ".ph"
},
"related": [
@ -3958,6 +4025,7 @@
"ISO3": "POL",
"Languages": "pl",
"Population": "38500000",
"budapest-convention": "parties",
"tld": ".pl"
},
"related": [
@ -4068,6 +4136,7 @@
"ISO3": "PRT",
"Languages": "pt-PT,mwl",
"Population": "10676000",
"budapest-convention": "parties",
"tld": ".pt"
},
"related": [
@ -4112,6 +4181,7 @@
"ISO3": "PRY",
"Languages": "es-PY,gn",
"Population": "6375830",
"budapest-convention": "parties",
"tld": ".py"
},
"related": [
@ -4178,6 +4248,7 @@
"ISO3": "ROU",
"Languages": "ro,hu,rom",
"Population": "21959278",
"budapest-convention": "parties",
"tld": ".ro"
},
"related": [
@ -4200,6 +4271,7 @@
"ISO3": "SRB",
"Languages": "sr,hu,bs,rom",
"Population": "7344847",
"budapest-convention": "parties",
"tld": ".rs"
},
"related": [
@ -4376,6 +4448,7 @@
"ISO3": "SWE",
"Languages": "sv-SE,se,sma,fi-SE",
"Population": "9828655",
"budapest-convention": "parties",
"tld": ".se"
},
"related": [
@ -4442,6 +4515,7 @@
"ISO3": "SVN",
"Languages": "sl,sh",
"Population": "2007000",
"budapest-convention": "parties",
"tld": ".si"
},
"related": [
@ -4486,6 +4560,7 @@
"ISO3": "SVK",
"Languages": "sk,hu",
"Population": "5455000",
"budapest-convention": "parties",
"tld": ".sk"
},
"related": [
@ -4508,6 +4583,7 @@
"ISO3": "SLE",
"Languages": "en-SL,men,tem",
"Population": "5245695",
"budapest-convention": "observers",
"tld": ".sl"
},
"related": [
@ -4530,6 +4606,7 @@
"ISO3": "SMR",
"Languages": "it-SM",
"Population": "31477",
"budapest-convention": "parties",
"tld": ".sm"
},
"related": [
@ -4552,6 +4629,7 @@
"ISO3": "SEN",
"Languages": "fr-SN,wo,fuc,mnk",
"Population": "12323252",
"budapest-convention": "parties",
"tld": ".sn"
},
"related": [
@ -4882,6 +4960,7 @@
"ISO3": "TLS",
"Languages": "tet,pt-TL,id,en",
"Population": "1154625",
"budapest-convention": "observers",
"tld": ".tl"
},
"related": [
@ -4926,6 +5005,7 @@
"ISO3": "TUN",
"Languages": "ar-TN,fr",
"Population": "10589025",
"budapest-convention": "observers",
"tld": ".tn"
},
"related": [
@ -4948,6 +5028,7 @@
"ISO3": "TON",
"Languages": "to,en-TO",
"Population": "122580",
"budapest-convention": "parties",
"tld": ".to"
},
"related": [
@ -4970,6 +5051,7 @@
"ISO3": "TUR",
"Languages": "tr-TR,ku,diq,az,av",
"Population": "77804122",
"budapest-convention": "parties",
"tld": ".tr"
},
"related": [
@ -4992,6 +5074,7 @@
"ISO3": "TTO",
"Languages": "en-TT,hns,fr,es,zh",
"Population": "1328019",
"budapest-convention": "observers",
"tld": ".tt"
},
"related": [
@ -5080,6 +5163,7 @@
"ISO3": "UKR",
"Languages": "uk,ru-UA,rom,pl,hu",
"Population": "45415596",
"budapest-convention": "parties",
"tld": ".ua"
},
"related": [
@ -5146,6 +5230,7 @@
"ISO3": "USA",
"Languages": "en-US,es-US,haw,fr",
"Population": "310232863",
"budapest-convention": "parties",
"tld": ".us"
},
"related": [
@ -5168,6 +5253,7 @@
"ISO3": "URY",
"Languages": "es-UY",
"Population": "3477000",
"budapest-convention": "observers",
"tld": ".uy"
},
"related": [
@ -5344,6 +5430,7 @@
"ISO3": "VUT",
"Languages": "bi,en-VU,fr-VU",
"Population": "221552",
"budapest-convention": "observers",
"tld": ".vu"
},
"related": [
@ -5454,6 +5541,7 @@
"ISO3": "ZAF",
"Languages": "zu,xh,af,nso,en-ZA,tn,st,ts,ss,ve,nr",
"Population": "49000000",
"budapest-convention": "observers",
"tld": ".za"
},
"related": [
@ -5554,5 +5642,5 @@
"value": "netherlands antilles"
}
],
"version": 1
"version": 2
}

26
clusters/threat-actor.json
View File

@ -8328,10 +8328,12 @@
"description": "VENOM SPIDER is the developer of a large toolset that includes SKID, VenomKit and Taurus Loader. Under the moniker 'badbullzvenom', the adversary has been an active member of Russian underground forums since at least 2012, specializing in the identification of vulnerabilities and the subsequent development of tools for exploitation, as well as for gaining and maintaining access to victim machines and carding services. Recent advertisements for the malware indicate that VENOM SPIDER limits the sale and use of its tools, selling modules only to trusted affiliates. This preference can be seen in the fact that adversaries observed using the tools include the targeted criminal adversary COBALT SPIDER and BGH adversaries WIZARD SPIDER and PINCHY SPIDER.",
"meta": {
"refs": [
"https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2020CrowdStrikeGlobalThreatReport.pdf"
"https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2020CrowdStrikeGlobalThreatReport.pdf",
"https://www.esentire.com/web-native-pages/the-hunt-for-venom-spider-part-2"
],
"synonyms": [
"badbullzvenom"
"badbullzvenom",
"badbullz"
]
},
"uuid": "86b4e2f3-8bbf-48fd-9d27-034d3ac3b187",
@ -11338,6 +11340,26 @@
"uuid": "aac49b4e-74e9-49fa-84f9-e340cf8bafbc",
"value": "APT43"
},
{
"description": "Hagga is believed to have been using Agent Tesla, 2021’s sixth most prevalent malware, to steal sensitive information from his victims since the latter part of 2021.",
"meta": {
"refs": [
"https://www.team-cymru.com/post/an-analysis-of-infrastructure-linked-to-the-hagga-threat-actor",
"https://otx.alienvault.com/pulse/62cfe4ef3415be5f83be81d1"
]
},
"related": [
{
"dest-uuid": "f8cd62cb-b9d3-4352-8f46-0961cfde104c",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "uses"
}
],
"uuid": "1e318d85-79c7-4988-83b7-ff86a974786c",
"value": "Hagga"
},
{
"description": "[Microsoft] Volt Typhoon, a state-sponsored actor based in China that typically focuses on espionage and information gathering. Microsoft assesses with moderate confidence that this Volt Typhoon campaign is pursuing development of capabilities that could disrupt critical communications infrastructure between the United States and Asia region during future crises.\n\n[Secureworks] BRONZE SILHOUETTE likely operates on behalf the PRC. The targeting of U.S. government and defense organizations for intelligence gain aligns with PRC requirements, and the tradecraft observed in these engagements overlap with other state-sponsored Chinese threat groups.",
"meta": {

9
clusters/tool.json
View File

@ -6308,6 +6308,13 @@
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
},
{
"dest-uuid": "1e318d85-79c7-4988-83b7-ff86a974786c",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "used-by"
}
],
"uuid": "f8cd62cb-b9d3-4352-8f46-0961cfde104c",
@ -10596,5 +10603,5 @@
"value": "VENOMBITE"
}
],
"version": 167
"version": 168
}