Alexandre Dulaunoy
150e3152cc
Merge pull request #809 from MISP/dev
...
Updated the `region` cluster
2023-01-27 15:08:16 +01:00
Alexandre Dulaunoy
b7543c5012
Merge pull request #789 from Mathieu4141/threat-actors/fix-sectorj04
...
[threat-actors] Remove SectorJ04 duplicate
2023-01-27 15:05:37 +01:00
Mathieu Beligon
a452263ace
[threat-actors] pr.review: Add SectorJ04 as alias of TA505
2023-01-27 13:32:58 +01:00
Delta-Sierra
89bb349184
Merge https://github.com/MISP/misp-galaxy
2023-01-26 11:46:14 +01:00
Delta-Sierra
0bb1f48ad6
fix missing brackets
2023-01-25 14:47:22 +01:00
Christian Studer
e87d39e3f4
fix: [region] JQed all the things !!
2023-01-25 09:24:52 +01:00
Delta-Sierra
50ca40e408
add Anubis & Godfather android banking trojans
2023-01-25 09:05:19 +01:00
Christian Studer
51610df907
chg: [region] Updated the `region` Galaxy Cluster
...
- Added missing entry (Antarctica)
- Ordered the `subregions` meta field
2023-01-24 22:53:54 +01:00
ofenomeno
cb8d700e62
adding uavs
2023-01-24 19:55:46 +01:00
Alexandre Dulaunoy
2f0dfc7656
chg: [sigma] updated
2023-01-23 10:10:46 +01:00
Alexandre Dulaunoy
4a342354f9
chg: [sigma] updated
2023-01-20 13:58:11 +01:00
Christian Studer
5c21588d7c
add: [country] Manually added the missing relations to some `country` cluster values
...
- The previous commit (071ecb8
) that added the
mahority of relations between countries and
regions were automatically added based on the
country names specified in the `region` cluster.
The relations added here are the remaining
countries that are not litterally defined the
same way they are in the `region` cluster
2023-01-16 22:22:42 +01:00
Christian Studer
325f51479b
chg: [country] Clarified the US cluster value
2023-01-16 22:20:30 +01:00
Christian Studer
071ecb8a52
add: [country] Added references between `country` cluster values and the related region they're located in, from the `region` galaxy cluster
2023-01-16 21:35:22 +01:00
Alexandre Dulaunoy
323f9f47a1
chg: [sigma] version must be an integer
2023-01-12 16:45:21 +01:00
Alexandre Dulaunoy
fd226d47a2
chg: [sigma] new version of the cluster
2023-01-12 14:10:22 +01:00
Alexandre Dulaunoy
c0fdfb0e99
chg: [sigma] updated with latest version + new relationship script
2023-01-12 13:46:31 +01:00
Alexandre Dulaunoy
e54366fb87
chg: [threat-actor] added the missing synonyms
2023-01-10 15:55:30 +01:00
Alexandre Dulaunoy
187701bacb
chg: [sigma] regenerated from the test script (also updated the script
...
to ensure UUID consistency for the galaxy)
2023-01-06 15:36:33 +01:00
Alexandre Dulaunoy
9955401791
chg: [sigma] jq all the things
2023-01-06 15:13:35 +01:00
Alexandre Dulaunoy
8539361df5
Merge branch 'main' of https://github.com/jstnk9/misp-galaxy into jstnk9-main
2023-01-06 15:11:27 +01:00
jstnk9
5bcec1d72f
Merge branch 'MISP:main' into main
2023-01-03 11:10:49 +01:00
Jürgen Löhel
d4debd619b
chg: [ransomware] Extends the entry for JCrypt
...
* Add the reference to MafiaWare666 based on the latest research from
the Avast Threat Lab: https://decoded.avast.io/threatresearch/decrypted-mafiaware666-ransomware/
* Add more infos from Andrew Ivanovs the great blog post: https://id-ransomware.blogspot.com/2020/12/jcrypt-ransomware.html
Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
2022-12-23 01:44:20 -06:00
Delta-Sierra
3f4edb480b
add Malteiro
2022-12-16 16:43:50 +01:00
jstnk9
cb19f6bda7
galaxy for sigma rules
2022-12-09 08:48:54 +01:00
Delta-Sierra
5931f51d7a
add TAG-53
2022-12-08 11:31:02 +01:00
Delta-Sierra
3ea2d62a83
Version Update
2022-11-28 16:27:54 +01:00
Delta-Sierra
6016b1000c
Merge https://github.com/MISP/misp-galaxy
2022-11-28 16:17:08 +01:00
Delta-Sierra
5d83563e0e
Fix Duplicate
2022-11-28 16:15:40 +01:00
Delta-Sierra
6c36295318
Update several RAT & Ransomwares
2022-11-28 16:13:38 +01:00
Alexandre Dulaunoy
de12f46ba6
chg: [mitre] updated
2022-11-28 12:48:29 +01:00
Alexandre Dulaunoy
fda4160bed
chg: [target-information] fix the duplicate
2022-11-24 15:08:16 +01:00
Alexandre Dulaunoy
f15e4ed3bc
chg: [target-information] duplicate removal
2022-11-24 15:05:47 +01:00
Alexandre Dulaunoy
1d9a73abdd
chg: [target] fix duplicate synonyms
2022-11-24 15:03:18 +01:00
Christian Studer
e3126ef857
fix: [clusters] Fixed some other few `meta` field names
2022-11-24 09:17:28 +01:00
Christian Studer
823124d422
fix; [mitre-ics-assets] Fixed some `refs` meta field names
2022-11-23 20:44:46 +01:00
Christian Studer
493a5bf94e
fix: [target-information] Fixed `synonyms` meta field name
2022-11-23 20:40:35 +01:00
Alexandre Dulaunoy
5c979ae554
fix: [tool] Houdini relationship to something which exist (ok I know it's Houdini)
2022-11-22 15:19:40 +01:00
Alexandre Dulaunoy
0b6034d9be
Merge pull request #800 from Delta-Sierra/main
...
Add ransomwares
2022-11-22 15:11:42 +01:00
Alexandre Dulaunoy
8947d0035b
fix: [sigma rules] until new the PR and tool is done for sigma. The
...
galaxy is removed.
2022-11-22 15:08:17 +01:00
Delta-Sierra
5f0d7f6d68
add VJw0rm description
2022-11-22 14:55:10 +01:00
Delta-Sierra
f4abf37b01
fix versions
2022-11-22 12:45:15 +01:00
Delta-Sierra
c02b74f999
merge
2022-11-22 12:43:18 +01:00
Delta-Sierra
ffc68b9b8f
add several ransomwares
2022-11-22 12:40:47 +01:00
Delta-Sierra
e316382b8a
add qakbot ref
2022-11-22 12:06:03 +01:00
Delta-Sierra
8bf6d73d66
add BazarCall campaign
2022-11-22 09:08:28 +01:00
Delta-Sierra
3c7230e38e
add Bazarbackdoor Synonyms
2022-11-22 09:00:04 +01:00
Thomas Dupuy
be7450494e
Add Evasive Panda Threat Actor
2022-11-18 16:38:11 +00:00
Alexandre Dulaunoy
4844a7021c
chg: [sigma] duplicate value changed
2022-11-18 14:36:02 +01:00
Alexandre Dulaunoy
c41b99d8b9
fix: [sigma] remove duplicate references
2022-11-18 14:21:27 +01:00
Alexandre Dulaunoy
59f5fc5f76
Merge branch 'main' of github.com:MISP/misp-galaxy into main
2022-11-18 14:18:29 +01:00
Alexandre Dulaunoy
7d4011a0a2
chg: [sigma] jq all the things
2022-11-18 14:17:52 +01:00
Terrtia
e3b6e9d229
fix: [handicap] fix galaxy icon + name + type
2022-11-17 15:16:05 +01:00
Alexandre Dulaunoy
9b8619bbbe
Merge branch 'main' of https://github.com/jstnk9/misp-galaxy into jstnk9-main
2022-11-16 11:07:50 +01:00
Jürgen Löhel
f595195cd2
chg: [botnets] Adds KmsdBot
...
Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
2022-11-15 18:10:39 -06:00
Jstnk9
473f1a13aa
galaxy related to sigma rtules
...
galaxy related to sigma rtules
2022-11-15 22:56:18 +01:00
Delta-Sierra
2269f4decd
fix tool type
2022-11-15 13:56:53 +01:00
Delta-Sierra
9fc65c0e34
version fix
2022-11-15 13:37:02 +01:00
Delta-Sierra
91d535925f
version fix
2022-11-15 13:36:49 +01:00
Delta-Sierra
3837058ab1
merge
2022-11-15 12:54:03 +01:00
Delta-Sierra
d020efd276
add raspberry Robin worm & others
2022-11-15 11:57:10 +01:00
Alexandre Dulaunoy
b787bbeb23
Merge pull request #792 from nyx0/main
...
Add RomCom TA.
2022-11-05 07:50:20 +01:00
Alexandre Dulaunoy
3b196f8361
Merge pull request #791 from Mathieu4141/threat-actors/add-phosphorus-alias-to-apt-35
...
[threat-actors] Add Phosphorus in APT35 aliases
2022-11-05 07:49:55 +01:00
Thomas Dupuy
9ac53e5d5e
Add RomCom TA.
2022-11-04 02:34:10 +00:00
Alexandre Dulaunoy
6c4da5dd55
Merge pull request #790 from Mathieu4141/threat-actors/fix-dust-storm
...
[threat-actors] Remove DustStorm alias from APT10
2022-11-03 11:35:20 +01:00
Alexandre Dulaunoy
52a6fff6a2
Merge pull request #788 from Mathieu4141/threat-actors/fix-cobalt-dickens
...
[threat-actors] Remove cobalt dickens duplicate
2022-11-03 11:27:08 +01:00
Alexandre Dulaunoy
3b4dcd6ad3
Merge pull request #787 from Mathieu4141/threat-actors/fix-subaat-duplicate
...
[threat-actors] Remove subaat duplicate
2022-11-03 11:26:21 +01:00
Mathieu Beligon
8a9dd47f8f
[threat-actors] Add Phosphorus in APT35 aliases
2022-11-02 23:49:22 -07:00
Mathieu Beligon
21d4292faf
[threat-actors] Remove DustStorm alias from APT10
2022-11-02 23:31:31 -07:00
Mathieu Beligon
e61733591f
[threat-actors] Remove SectorJ04 duplicate
2022-11-02 20:30:40 -07:00
Mathieu Beligon
9f0869097a
[threat-actors] Remove cobalt dickens duplicate
2022-11-02 18:09:42 -07:00
Mathieu Beligon
e3e5560e37
[threat-actors] Remove subaat duplicate
2022-11-02 17:57:47 -07:00
Mathieu Beligon
5801bbcfc1
[threat-actors] Remove Skeleton Spider duplicate
2022-11-02 17:38:07 -07:00
Alexandre Dulaunoy
015650c6d7
chg: [mitre-attack] updated to version 12.0
2022-11-01 22:39:33 +01:00
Delta-Sierra
9952366667
add Prynt Stealer & variants
2022-10-14 16:03:45 +02:00
Delta-Sierra
355025eb5b
fix metadata in wrong slot
2022-10-04 13:28:42 +02:00
Delta-Sierra
e5b3062912
add Volatile Cedar synonym
2022-10-03 16:06:13 +02:00
Thomas Dupuy
4bcf80f01b
Add SharPyShell tool.
2022-10-02 22:00:54 +00:00
Alexandre Dulaunoy
409c82f40c
Merge pull request #781 from Mathieu4141/threat-actors/fix-neodymium
...
[threat-actors] Fix G0055 (NEODYMIUM) alias
2022-09-30 06:39:31 +02:00
Alexandre Dulaunoy
588184bacd
Merge pull request #780 from Mathieu4141/threat-actors/fix-svmondr
...
[threat-actors] Remove SVCMONDR duplicate
2022-09-30 06:38:56 +02:00
Alexandre Dulaunoy
800006e6ab
Merge pull request #778 from Mathieu4141/threat-actors/fix-malware-reuser-duplicate
...
[threat-actors] Fix Volatile Cedar and Dancing Salome conflicts
2022-09-30 06:37:15 +02:00
Mathieu Beligon
74c6835d18
[threat-actors] Fix G0055 (NEODYMIUM) alias
2022-09-29 17:16:57 -07:00
Mathieu Beligon
a740e35687
[threat-actors] Remove SVCMONDR duplicate
2022-09-29 16:11:19 -07:00
Mathieu Beligon
5994fa4160
[threat-actors] Fix Volatile Cedar and Dancing Salome conflicts
2022-09-29 14:51:38 -07:00
Mathieu Beligon
4f47e6e2d3
[threat-actors] Equation group: separate from Lamberts and add tools
2022-09-29 11:28:54 -07:00
Thomas Dupuy
c66d6823a1
Add APT-Q-12 Threat Actor.
2022-09-29 02:30:41 +00:00
Alexandre Dulaunoy
c3b65a2d15
chg: [threat-actor] JSON fix
2022-09-27 08:18:13 +02:00
Alexandre Dulaunoy
067e449a41
Merge branch 'main' of https://github.com/nyx0/misp-galaxy into nyx0-main
2022-09-27 08:17:41 +02:00
Christophe Vandeplas
e259458d5a
chg: [mitre] bump to v11.3
2022-09-27 07:30:13 +02:00
Thomas Dupuy
bfd1812cef
Add Void Balaur.
2022-09-27 00:11:20 +00:00
Alexandre Dulaunoy
eacab6ca27
new: [malpedia] remove duplicate UUIDs objects (coming from Malpedia API)
2022-09-26 10:58:09 +02:00
Alexandre Dulaunoy
7cd322640f
Merge pull request #771 from Delta-Sierra/main
...
fetch malpedia
2022-09-26 10:07:24 +02:00
Delta-Sierra
a611230bef
fetch malpedia
2022-09-26 09:23:07 +02:00
Mathieu Beligon
22a39f4fdc
[threat-actors] Add BITWISE SPIDER
2022-09-20 11:23:33 -07:00
Alexandre Dulaunoy
9b8b51fe53
Merge pull request #769 from Mathieu4141/threat-actors-add/no-name-057-06
...
[threat-actors] Add NoName057(16)
2022-09-17 07:43:42 +02:00
Alexandre Dulaunoy
2f169e4258
Merge pull request #766 from Mathieu4141/threat-actors/fix-ta505
...
[threat-actors] Clean TA505 aliases
2022-09-17 07:43:18 +02:00
Mathieu Beligon
580d2c6931
[threat-actors] Add NoName057(16)
2022-09-16 20:11:06 -06:00
Alexandre Dulaunoy
30cb4e7e60
Merge pull request #768 from Delta-Sierra/main
...
New clusters
2022-09-16 06:40:43 +02:00
Delta-Sierra
8202a7f48f
Add PlugX ref
2022-09-15 15:39:47 +02:00
Delta-Sierra
0903300b75
Add Chisel
2022-09-15 13:24:49 +02:00