Mathieu Beligon
a452263ace
[threat-actors] pr.review: Add SectorJ04 as alias of TA505
2023-01-27 13:32:58 +01:00
Alexandre Dulaunoy
06f250ef7c
Merge pull request #810 from Delta-Sierra/main
...
add Anubis & Godfather android banking trojans
2023-01-26 15:03:41 +01:00
o1mate
0b661d4f80
Added two new galaxies : An ammunition galaxy containing a list of known sold ammunitions ordered by brands, and a firearm galaxy containing two clusters (handguns, shotguns) scrapped from a famous vendor and ordered by model name (Format : Model name - SKU).
2023-01-26 08:34:38 -05:00
Delta-Sierra
89bb349184
Merge https://github.com/MISP/misp-galaxy
2023-01-26 11:46:14 +01:00
Delta-Sierra
0bb1f48ad6
fix missing brackets
2023-01-25 14:47:22 +01:00
Alexandre Dulaunoy
cba41818fb
Merge pull request #808 from 0xOFenomeno/uavs-final
...
Adding UAVs' galaxy and related cluster
2023-01-25 10:12:27 +01:00
Christian Studer
e87d39e3f4
fix: [region] JQed all the things !!
2023-01-25 09:24:52 +01:00
Delta-Sierra
50ca40e408
add Anubis & Godfather android banking trojans
2023-01-25 09:05:19 +01:00
Christian Studer
51610df907
chg: [region] Updated the `region` Galaxy Cluster
...
- Added missing entry (Antarctica)
- Ordered the `subregions` meta field
2023-01-24 22:53:54 +01:00
Christian Studer
57871ee05d
add: [region] Added script to update the `region` cluster based on the UNSD M49 csv file
2023-01-24 22:49:14 +01:00
ofenomeno
cb8d700e62
adding uavs
2023-01-24 19:55:46 +01:00
Christian Studer
f605f041d9
fix: [tools] Added missing closing `'`
2023-01-24 01:21:54 +01:00
Christian Studer
826c5ac4d9
Merge branch 'main' of github.com:MISP/misp-galaxy
2023-01-24 01:20:53 +01:00
Alexandre Dulaunoy
2f0dfc7656
chg: [sigma] updated
2023-01-23 10:10:46 +01:00
Alexandre Dulaunoy
4a342354f9
chg: [sigma] updated
2023-01-20 13:58:11 +01:00
Christian Studer
5c21588d7c
add: [country] Manually added the missing relations to some `country` cluster values
...
- The previous commit (071ecb8
) that added the
mahority of relations between countries and
regions were automatically added based on the
country names specified in the `region` cluster.
The relations added here are the remaining
countries that are not litterally defined the
same way they are in the `region` cluster
2023-01-16 22:22:42 +01:00
Christian Studer
325f51479b
chg: [country] Clarified the US cluster value
2023-01-16 22:20:30 +01:00
Christian Studer
071ecb8a52
add: [country] Added references between `country` cluster values and the related region they're located in, from the `region` galaxy cluster
2023-01-16 21:35:22 +01:00
Christian Studer
1402b7aba6
Merge branch 'main' of github.com:MISP/misp-galaxy
2023-01-16 13:34:03 +01:00
Alexandre Dulaunoy
997e570ad2
fix: [sigma] version must be an int
2023-01-13 16:38:56 +01:00
Alexandre Dulaunoy
323f9f47a1
chg: [sigma] version must be an integer
2023-01-12 16:45:21 +01:00
Alexandre Dulaunoy
5804065e16
chg: [tools] sigma tools updated
2023-01-12 14:16:20 +01:00
Alexandre Dulaunoy
fd226d47a2
chg: [sigma] new version of the cluster
2023-01-12 14:10:22 +01:00
Alexandre Dulaunoy
c0fdfb0e99
chg: [sigma] updated with latest version + new relationship script
2023-01-12 13:46:31 +01:00
Alexandre Dulaunoy
e54366fb87
chg: [threat-actor] added the missing synonyms
2023-01-10 15:55:30 +01:00
Alexandre Dulaunoy
1c8880b3bb
new: [tools] Sigma export tool added based on https://github.com/jstnk9/MISP/pull/1
2023-01-06 16:00:37 +01:00
Alexandre Dulaunoy
187701bacb
chg: [sigma] regenerated from the test script (also updated the script
...
to ensure UUID consistency for the galaxy)
2023-01-06 15:36:33 +01:00
Alexandre Dulaunoy
9b9287676d
Merge branch 'jstnk9-main' into main
2023-01-06 15:14:18 +01:00
Alexandre Dulaunoy
9955401791
chg: [sigma] jq all the things
2023-01-06 15:13:35 +01:00
Alexandre Dulaunoy
8539361df5
Merge branch 'main' of https://github.com/jstnk9/misp-galaxy into jstnk9-main
2023-01-06 15:11:27 +01:00
Alexandre Dulaunoy
3739ee9152
Merge pull request #805 from jloehel/mafiaware666
...
chg: [ransomware] Extends the entry for JCrypt
2023-01-06 15:09:15 +01:00
jstnk9
5bcec1d72f
Merge branch 'MISP:main' into main
2023-01-03 11:10:49 +01:00
Jürgen Löhel
d4debd619b
chg: [ransomware] Extends the entry for JCrypt
...
* Add the reference to MafiaWare666 based on the latest research from
the Avast Threat Lab: https://decoded.avast.io/threatresearch/decrypted-mafiaware666-ransomware/
* Add more infos from Andrew Ivanovs the great blog post: https://id-ransomware.blogspot.com/2020/12/jcrypt-ransomware.html
Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
2022-12-23 01:44:20 -06:00
Alexandre Dulaunoy
ac1242a40e
Merge pull request #804 from Delta-Sierra/main
...
add Malteiro, TAG-53
2022-12-16 16:51:41 +01:00
Delta-Sierra
3f4edb480b
add Malteiro
2022-12-16 16:43:50 +01:00
jstnk9
cb19f6bda7
galaxy for sigma rules
2022-12-09 08:48:54 +01:00
Delta-Sierra
5931f51d7a
add TAG-53
2022-12-08 11:31:02 +01:00
Christian Studer
52f6f0631e
Merge branch 'main' of github.com:MISP/misp-galaxy
2022-12-03 11:04:05 +01:00
Alexandre Dulaunoy
927d9208fc
Merge pull request #801 from Delta-Sierra/main
...
Update Ransomwares & others small updates
2022-11-28 16:43:19 +01:00
Delta-Sierra
3ea2d62a83
Version Update
2022-11-28 16:27:54 +01:00
Delta-Sierra
6016b1000c
Merge https://github.com/MISP/misp-galaxy
2022-11-28 16:17:08 +01:00
Delta-Sierra
5d83563e0e
Fix Duplicate
2022-11-28 16:15:40 +01:00
Delta-Sierra
6c36295318
Update several RAT & Ransomwares
2022-11-28 16:13:38 +01:00
Alexandre Dulaunoy
de12f46ba6
chg: [mitre] updated
2022-11-28 12:48:29 +01:00
Andras Iklody
13dbf70d77
fix: [att&ck converter] allow multiple external IDs
...
- There are in some cases external ID references to CAPEC in addition to ATT&CK in techniques
- convert external ID to a list rather than a single string
- as reported by @SYNchroACK
- as hurried along by a disappointed @deresz
2022-11-28 12:25:25 +01:00
Christian Studer
3ba51ba77e
Merge branch 'main' of github.com:MISP/misp-galaxy
2022-11-24 15:14:02 +01:00
Alexandre Dulaunoy
fda4160bed
chg: [target-information] fix the duplicate
2022-11-24 15:08:16 +01:00
Alexandre Dulaunoy
f15e4ed3bc
chg: [target-information] duplicate removal
2022-11-24 15:05:47 +01:00
Alexandre Dulaunoy
1d9a73abdd
chg: [target] fix duplicate synonyms
2022-11-24 15:03:18 +01:00
Christian Studer
e3126ef857
fix: [clusters] Fixed some other few `meta` field names
2022-11-24 09:17:28 +01:00