MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity
2,846 Commits
6 Branches
47 Tags
62 MiB
Commit Graph

2846 Commits (0bb1f48ad632865c3c18fb48a8a62efaf1f38e73)

Author SHA1 Message Date
Delta-Sierra 0bb1f48ad6 fix missing brackets 2023-01-25 14:47:22 +01:00
Delta-Sierra 50ca40e408 add Anubis & Godfather android banking trojans 2023-01-25 09:05:19 +01:00
Alexandre Dulaunoy 1c8880b3bb
new: [tools] Sigma export tool added based on https://github.com/jstnk9/MISP/pull/1 2023-01-06 16:00:37 +01:00
Alexandre Dulaunoy 187701bacb
chg: [sigma] regenerated from the test script (also updated the script 
to ensure UUID consistency for the galaxy)
 2023-01-06 15:36:33 +01:00
Alexandre Dulaunoy 9b9287676d
Merge branch 'jstnk9-main' into main 2023-01-06 15:14:18 +01:00
Alexandre Dulaunoy 9955401791
chg: [sigma] jq all the things 2023-01-06 15:13:35 +01:00
Alexandre Dulaunoy 8539361df5
Merge branch 'main' of https://github.com/jstnk9/misp-galaxy into jstnk9-main 2023-01-06 15:11:27 +01:00
Alexandre Dulaunoy 3739ee9152
Merge pull request #805 from jloehel/mafiaware666 
chg: [ransomware] Extends the entry for JCrypt
 2023-01-06 15:09:15 +01:00
jstnk9 5bcec1d72f
Merge branch 'MISP:main' into main 2023-01-03 11:10:49 +01:00
Jürgen Löhel d4debd619b
chg: [ransomware] Extends the entry for JCrypt 
* Add the reference to MafiaWare666 based on the latest research from
  the Avast Threat Lab: https://decoded.avast.io/threatresearch/decrypted-mafiaware666-ransomware/
* Add more infos from Andrew Ivanovs the great blog post: https://id-ransomware.blogspot.com/2020/12/jcrypt-ransomware.html

Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
 2022-12-23 01:44:20 -06:00
Alexandre Dulaunoy ac1242a40e
Merge pull request #804 from Delta-Sierra/main 
add Malteiro, TAG-53
 2022-12-16 16:51:41 +01:00
Delta-Sierra 3f4edb480b add Malteiro 2022-12-16 16:43:50 +01:00
jstnk9 cb19f6bda7 galaxy for sigma rules 2022-12-09 08:48:54 +01:00
Delta-Sierra 5931f51d7a add TAG-53 2022-12-08 11:31:02 +01:00
Alexandre Dulaunoy 927d9208fc
Merge pull request #801 from Delta-Sierra/main 
Update Ransomwares & others small updates
 2022-11-28 16:43:19 +01:00
Delta-Sierra 3ea2d62a83 Version Update 2022-11-28 16:27:54 +01:00
Delta-Sierra 6016b1000c Merge https://github.com/MISP/misp-galaxy 2022-11-28 16:17:08 +01:00
Delta-Sierra 5d83563e0e Fix Duplicate 2022-11-28 16:15:40 +01:00
Delta-Sierra 6c36295318 Update several RAT & Ransomwares 2022-11-28 16:13:38 +01:00
Alexandre Dulaunoy de12f46ba6
chg: [mitre] updated 2022-11-28 12:48:29 +01:00
Andras Iklody 13dbf70d77
fix: [att&ck converter] allow multiple external IDs 
- There are in some cases external ID references to CAPEC in addition to ATT&CK in techniques
- convert external ID to a list rather than a single string

- as reported by @SYNchroACK
- as hurried along by a disappointed @deresz
 2022-11-28 12:25:25 +01:00
Alexandre Dulaunoy fda4160bed
chg: [target-information] fix the duplicate 2022-11-24 15:08:16 +01:00
Alexandre Dulaunoy f15e4ed3bc
chg: [target-information] duplicate removal 2022-11-24 15:05:47 +01:00
Alexandre Dulaunoy 1d9a73abdd
chg: [target] fix duplicate synonyms 2022-11-24 15:03:18 +01:00
Christian Studer e3126ef857
fix: [clusters] Fixed some other few `meta` field names 2022-11-24 09:17:28 +01:00
Christian Studer 823124d422
fix; [mitre-ics-assets] Fixed some `refs` meta field names 2022-11-23 20:44:46 +01:00
Christian Studer 493a5bf94e
fix: [target-information] Fixed `synonyms` meta field name 2022-11-23 20:40:35 +01:00
Christian Studer bea58d5843 Merge branch 'main' of github.com:MISP/misp-galaxy 2022-11-23 19:47:31 +01:00
Alexandre Dulaunoy 5c979ae554
fix: [tool] Houdini relationship to something which exist (ok I know it's Houdini) 2022-11-22 15:19:40 +01:00
Alexandre Dulaunoy 0b6034d9be
Merge pull request #800 from Delta-Sierra/main 
Add ransomwares
 2022-11-22 15:11:42 +01:00
Alexandre Dulaunoy 8947d0035b
fix: [sigma rules] until new the PR and tool is done for sigma. The 
galaxy is removed.
 2022-11-22 15:08:17 +01:00
Delta-Sierra 5f0d7f6d68 add VJw0rm description 2022-11-22 14:55:10 +01:00
Delta-Sierra f4abf37b01 fix versions 2022-11-22 12:45:15 +01:00
Delta-Sierra c02b74f999 merge 2022-11-22 12:43:18 +01:00
Delta-Sierra ffc68b9b8f add several ransomwares 2022-11-22 12:40:47 +01:00
Delta-Sierra e316382b8a add qakbot ref 2022-11-22 12:06:03 +01:00
Delta-Sierra 8bf6d73d66 add BazarCall campaign 2022-11-22 09:08:28 +01:00
Delta-Sierra 3c7230e38e add Bazarbackdoor Synonyms 2022-11-22 09:00:04 +01:00
Alexandre Dulaunoy fe32cb4288
Merge pull request #799 from nyx0/main 
Add Evasive Panda Threat Actor
 2022-11-19 06:22:07 +01:00
Thomas Dupuy be7450494e Add Evasive Panda Threat Actor 2022-11-18 16:38:11 +00:00
Alexandre Dulaunoy 4844a7021c
chg: [sigma] duplicate value changed 2022-11-18 14:36:02 +01:00
Alexandre Dulaunoy c41b99d8b9
fix: [sigma] remove duplicate references 2022-11-18 14:21:27 +01:00
Alexandre Dulaunoy 59f5fc5f76
Merge branch 'main' of github.com:MISP/misp-galaxy into main 2022-11-18 14:18:29 +01:00
Alexandre Dulaunoy 63c587ab7d
Merge branch 'jstnk9-main' into main 2022-11-18 14:18:15 +01:00
Alexandre Dulaunoy 7d4011a0a2
chg: [sigma] jq all the things 2022-11-18 14:17:52 +01:00
Alexandre Dulaunoy aba1321b34
Merge pull request #798 from Terrtia/main 
Fix handicap type and icon
 2022-11-17 16:07:40 +01:00
Terrtia e3b6e9d229
fix: [handicap] fix galaxy icon + name + type 2022-11-17 15:16:05 +01:00
Alexandre Dulaunoy 9b8619bbbe
Merge branch 'main' of https://github.com/jstnk9/misp-galaxy into jstnk9-main 2022-11-16 11:07:50 +01:00
Alexandre Dulaunoy 2dcfa82f6b
Merge pull request #797 from jloehel/kmsd 
chg: [botnets] Adds KmsdBot
 2022-11-16 06:35:16 +01:00
Jürgen Löhel f595195cd2
chg: [botnets] Adds KmsdBot 
Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
 2022-11-15 18:10:39 -06:00