MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity
1,550 Commits
6 Branches
47 Tags
73 MiB
Commit Graph

962 Commits (5e30c583fb41881113c0afe93181beecf5bab82e)

Author SHA1 Message Date
Alexandre Dulaunoy b2538a1f8a
chg: [threat-actor] change attribution confidence to be a string by default 2019-03-19 16:51:41 +01:00
Alexandre Dulaunoy 095b0a4d81
chg: [attck4fraud] updated 2019-03-19 16:33:27 +01:00
Alexandre Dulaunoy 3cf53b670e
chg: [attck4fraud] completed 2019-03-19 16:02:08 +01:00
Alexandre Dulaunoy 2b619dd9b7
chg: [attck4fraud] Assets Transfer added 2019-03-19 15:52:33 +01:00
Alexandre Dulaunoy 75b4a3a951
chg: [attck4fraud] Obtain Fraudulent Assets added 2019-03-19 15:44:16 +01:00
Alexandre Dulaunoy bf6a605f6d
chg: [attck4fraud] Perform fraud added 2019-03-19 15:33:46 +01:00
Alexandre Dulaunoy e398cc3ef2
chg: [attck4fraud] Target compromise updated 2019-03-19 15:17:25 +01:00
Alexandre Dulaunoy e26918d749
chg: [attck4fraud] more techniques 2019-03-19 15:08:44 +01:00
Alexandre Dulaunoy 4f454493b7
chg: [threat-actor] BRONZE UNION is also uppercase 2019-03-19 14:47:03 +01:00
Alexandre Dulaunoy 9a6b597387
chg: [threat-actor] updated the version to avoid the past issue with 0 value for integer values 2019-03-19 14:44:49 +01:00
Alexandre Dulaunoy c2f10410f5
chg: [sector] typo fixed - reported in #364 2019-03-19 12:36:19 +01:00
Alexandre Dulaunoy e56cb33097
chg: [attck4fraud] fix the type issue 2019-03-19 10:03:33 +01:00
Alexandre Dulaunoy a80283672c
chg: [attck4fraud] uuid fixed 2019-03-19 08:39:08 +01:00
Alexandre Dulaunoy 2419a33807
chg: [attck4fraud] ATM Shimming added 2019-03-19 08:33:08 +01:00
Alexandre Dulaunoy 779bc4a6a0
chg: [attck4fraud] description fixed for FT1003 2019-03-19 08:11:33 +01:00
Alexandre Dulaunoy 3c067c42a8
Merge branch 'master' of github.com:MISP/misp-galaxy 2019-03-19 08:10:36 +01:00
Alexandre Dulaunoy 824465d879
add: [attck4fraud] initial attck-like matrix for fraud from https://github.com/burritoblue/attck4fraud (WiP) 2019-03-19 08:09:23 +01:00
Alexandre Dulaunoy 78b886b2f0
Merge pull request #363 from Delta-Sierra/master 
add H-worm RAT
 2019-03-19 07:31:04 +01:00
Deborah Servili 3294091600
add H-worm RAT 2019-03-18 16:24:55 +01:00
Bart dff2a827d6
Update preventive-measure.json 
Add ACL
 2019-03-17 21:47:54 +00:00
Deborah Servili 5ce8aae89e
add Operation Comando - hit version 100 2019-03-15 15:04:29 +01:00
ismasma 379ed61c34
Add payment method and price 2019-03-14 17:12:42 +01:00
Alexandre Dulaunoy 5db30ba974
chg: [threat-actor] SandCat added 2019-03-14 06:18:10 +01:00
Thomas Dupuy 60d79b0153 add synonym, no need for uppercase in the name :) 2019-03-13 23:07:10 +01:00
Deborah Servili ecf76178e7
add attribution-confidence attribute to threat-actor 2019-03-11 11:18:12 +01:00
Deborah Servili 7576d0db02
relations between SLUB Backdoor 2019-03-11 09:01:12 +01:00
Deborah Servili a65688ec02 Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy 2019-03-11 08:51:47 +01:00
Deborah Servili 33dbda1e1e Merge branch 'master' of https://github.com/MISP/misp-galaxy 2019-03-11 08:51:16 +01:00
Deborah Servili 59ee8a9f13
Merge branch 'master' into master 2019-03-11 08:40:38 +01:00
Deborah Servili ddab5f7006
Merge branch 'master' into master 2019-03-11 08:40:11 +01:00
Alexandre Dulaunoy 139e6c32ed
chg: [threat-actor] new attribution-confidence level introduced 2019-03-11 08:37:49 +01:00
Alexandre Dulaunoy eb665e2883
chg: [threat-actor] jq all the things 2019-03-10 11:15:13 +01:00
Alexandre Dulaunoy bebcc0eb5a
Merge branch 'master' of github.com:MISP/misp-galaxy 2019-03-10 10:48:31 +01:00
Alexandre Dulaunoy 6fb1303570
chg: [threat-actor] IRIDIUM added 
Ref: https://resecurity.com/blog/parliament_races/
 2019-03-10 10:47:34 +01:00
Raphaël Vinot 4f3e6335b5 fix: Wrong (duplicate) value. 2019-03-09 06:29:26 +01:00
Deborah Servili 2815e48610
add StealthWorker malware 2019-03-08 15:57:30 +01:00
Deborah Servili ee034babba
add SLUB backdoor 2019-03-08 14:39:34 +01:00
Alexandre Dulaunoy 769e0002ef
chg: [tools] jq all the things 2019-03-08 08:10:42 +01:00
Daniel Plohmann 1d8ada33a0
Update threat-actor.json 
another actor described by 360TIC.
 2019-03-07 17:50:46 +01:00
Alexandre Dulaunoy 63419046d4
Merge branch 'master' of github.com:MISP/misp-galaxy 2019-03-07 15:51:44 +01:00
Alexandre Dulaunoy 31ba566c18
chg: [tool] SLUB Backdoor added 2019-03-07 15:51:16 +01:00
Deborah Servili 7afd311abc
add Jokeroo RaaS 2019-03-07 15:23:30 +01:00
Daniel Plohmann cfb807861a
FireEye upgraded TEMP.Periscope to APT40 2019-03-07 14:34:14 +01:00
Deborah Servili eb0a33eab6
add operation Kabar Cobra 2019-03-06 15:52:49 +01:00
Deborah Servili ae49090845
add ref for garrantydecrypt 2019-03-04 16:34:52 +01:00
Deborah Servili 6ffb8dd437
add relation between Lazarus Group and Operation SharpShooter 2019-03-04 12:03:05 +01:00
Deborah Servili 19c4fe4d11
add Rising Sun Backdoor 2019-03-04 10:11:26 +01:00
Deborah Servili bd3fce00e1
add Razdel 2019-02-25 16:35:06 +01:00
Alexandre Dulaunoy f7367ef887
chg: [tool] Xbash description updated 2019-02-23 09:25:14 +01:00
Alexandre Dulaunoy f2159bfaa3
chg: [threat-actor] format fixed 2019-02-22 22:50:42 +01:00
Alexandre Dulaunoy f621b40263
chg: [threat-actor] jq all the things late in the night 2019-02-22 22:47:25 +01:00
Alexandre Dulaunoy d5df0d1064
chg: [threat-actor] uuid fixed 2019-02-22 22:45:28 +01:00
Alexandre Dulaunoy f2c80cbcdd
chg: [tool] BabyShark added 2019-02-22 22:44:44 +01:00
Alexandre Dulaunoy 38283f0f86
chg: [threat-actor] STOLEN PENCIL added 2019-02-22 22:41:06 +01:00
Alexandre Dulaunoy 243a6280e0
Merge pull request #350 from bartblaze/master 
Add more info on Lotus Blossom
 2019-02-21 23:39:33 +01:00
Bart 06553bbec2
Add more info on Lotus Blossom 
Add 2 more references, fix typo - Trend calls it "Esile", not "Eslie" as mistakenly stated by CFR. The backdoor itself is commonly referred to as Elise.
 2019-02-21 22:31:14 +00:00
Alexandre Dulaunoy 08e8aafcf7
chg: [cert-eu-govsector] version fixed 2019-02-21 07:19:04 +01:00
Alexandre Dulaunoy ed132cb1b8
chg: [threat-actor] version fixed 2019-02-21 07:18:16 +01:00
Daniel Plohmann 0cd79994cc
Two more actor names from GTR2019 
I found two more actor names while going again over the crowdstrike's report and updating the cross-references to malpedia.
 2019-02-19 22:38:11 +01:00
Daniel Plohmann 85ec27b4c4
Added missing actors from CrowdStrike GTR2019 2019-02-19 18:26:01 +01:00
Itay Cohen 7d9dc1ec9d
Fix 404'd reference of BuhTrap 2019-02-17 11:33:11 +02:00
Alexandre Dulaunoy 9ad8a76a38
chg: [ransomware] no related object in meta 2019-02-15 10:30:20 +01:00
mokaddem 34042abe23 new: Added draft of the election guildelines galaxy 2019-02-15 08:44:33 +01:00
Deborah Servili 5bf18ffd23
Merge branch 'master' into master 2019-02-14 16:29:04 +01:00
Deborah Servili 9c450a80d4
add Gallmaker and other clusters 2019-02-14 16:04:54 +01:00
Deborah Servili 2794a20589
add OSX/Shlayer and some refs 2019-02-14 12:42:28 +01:00
Alexandre Dulaunoy ad0ef66b0a
chg: [tool] jq jq jq jq jq jq jq jq 2019-02-12 21:41:33 +01:00
Thomas Dupuy 95a70d09a5 add ANEL/UPPERCUT in tool cluster 2019-02-12 12:19:23 -05:00
Deborah Servili 8aeed60a24
Add Siesta campaign 2019-02-11 16:30:46 +01:00
João Neto 662cc5a012
Updated "Iran" name 
This extra space leads to an unnecessary key error when parsing the json file
 2019-02-08 16:50:22 +01:00
Nils Kuhnert fc16f4f69c
Added Velvet Chollima as synonym to Kimsuki 2019-02-08 08:50:05 +01:00
Christophe Vandeplas e5f74c8fdc
Merge pull request #336 from 3c7/synonym/static-kitten 
Added static kitten as synonym for MuddyWater
 2019-02-07 08:54:49 +01:00
Alexandre Dulaunoy 2bbb8a6a43
Merge pull request #334 from 3c7/synonym/cobalt-spider 
Added Cobalt Spider as Synonym for Cobalt
 2019-02-07 08:53:19 +01:00
Nils Kuhnert 9778bea81e
Added Cobalt Spider reference 2019-02-07 08:41:00 +01:00
Nils Kuhnert 523a52c4db
Added static kitten as synonym for MuddyWater 2019-02-07 08:38:52 +01:00
Nils Kuhnert 0049acd81c
Added Turbine Panda as synonym for APT 26 2019-02-07 08:28:48 +01:00
Nils Kuhnert 5a077cf838
Added Cobalt Spider as Synonym for Cobalt 2019-02-07 08:26:10 +01:00
Nils Kuhnert a171d5aa9d
Added Ocean Buffalo synonym for Ocean Lotus 2019-02-03 21:36:21 +01:00
Alexandre Dulaunoy b9f1317941
Merge pull request #332 from Delta-Sierra/master 
Add APT39 & LockerGoga
 2019-02-01 18:36:12 +01:00
Nils Kuhnert 0b04046d91
Added Quilted Tiger as Synonym for Patchwork/Dropping Elephant. 2019-02-01 13:17:43 +01:00
Deborah Servili 233b7f3aff
add APT39 2019-01-31 18:48:19 +01:00
Deborah Servili b4751d396a
add LockerGoga ransomware 2019-01-30 12:07:19 +01:00
Nils Kuhnert d45a32e9e2
Added Shadow Crane as synonym for Dark Hotel. 2019-01-30 08:22:46 +01:00
Nils Kuhnert 42ecbd801c
Added "Stardust Chollima" as synonym for Lazarus. 2019-01-29 08:36:12 +01:00
Alexandre Dulaunoy 898bdaf7f8
Merge pull request #328 from Delta-Sierra/master 
add Silence Group
 2019-01-25 16:43:08 +01:00
Deborah Servili c11a31b12a
add Silence Group 2019-01-25 16:19:51 +01:00
Thomas Dupuy d38fb407ec add alternative name for DarkHydrus 2019-01-21 23:14:34 -05:00
Deborah Servili 45ed56cd61
add LoJax ref 2019-01-17 10:49:23 +01:00
Deborah Servili 3bdbd6646b
add Cold River Threat actor 2019-01-17 09:44:09 +01:00
Deborah Servili 5d61a75886
fix versions 2019-01-14 16:34:28 +01:00
Deborah Servili 61093f6f07
add several ransomware and threat actors 2019-01-14 16:28:15 +01:00
Deborah Servili 90d2bf7bc1
add drakhydrus ref 2019-01-11 10:17:07 +01:00
Deborah Servili cddfd5fcd1
TA505 threat actorand affiliates malwares 2019-01-11 09:53:08 +01:00
Deborah Servili 4547b09f49
add hidenad synonym 2019-01-10 11:53:30 +01:00
Deborah Servili a10a417b0a
add Cryptomix variants refs 2019-01-10 10:03:22 +01:00
Deborah Servili d3ae9e1e14
update version 2019-01-09 15:54:09 +01:00
Deborah Servili 90e3602db6
add AndroidOS_HidenAd 2019-01-09 15:33:34 +01:00
Deborah Servili cc0bd96527 Merge branch 'master' of https://github.com/MISP/misp-galaxy 2019-01-09 14:54:33 +01:00
Christophe Vandeplas 0ba220987d chg: [mitre] bump to latest MITRE ATT&CK dataset 2018-12-29 18:40:21 +01:00
Christophe Vandeplas 50c817a1fd
MITRE galaxy regeneration + updated migration script 2018-12-29 18:14:47 +01:00