Commit Graph

356 Commits (7b5aaaeff2fc19ba8638a07d02181534eb946197)

Author SHA1 Message Date
Déborah Servili 7b5aaaeff2 json fix 2017-04-11 14:18:29 +02:00
Déborah Servili eee2c6d6b5 update tool's galaxy using http://contagiodump.blogspot.lu/2013/03/mandiant-apt1-samples-categorized-by.html 2017-04-11 14:09:44 +02:00
Déborah Servili 0e7ca5b18e Merge https://github.com/MISP/misp-galaxy 2017-04-11 10:26:55 +02:00
Alexandre Dulaunoy bbf6716c73 Longhorn (CIA) added 2017-04-10 20:22:57 +02:00
Alexandre Dulaunoy ab5b73a3cd Sathurbot added 2017-04-06 20:49:53 +02:00
Alexandre Dulaunoy 8c09223477 The product from NSO Group Technologies added to the list of tools.
The Pegasus name is used as synonym of Chrysaor ;-)
2017-04-04 20:42:08 +02:00
Alexandre Dulaunoy 0578d7b7b1 The mysterious ZIRCONIUM activity group added 2017-04-03 19:44:36 +02:00
Alexandre Dulaunoy 0fb938a551 Merge pull request #43 from nyx0/master
Add new Sednit name
2017-03-31 15:34:25 +02:00
nyx0 78cdb10aae Add new Sednit name according to https://www.secureworks.com/research/iron-twilight-supports-active-measures 2017-03-31 09:28:50 -04:00
Alexandre Dulaunoy b3f1069686 Trochilus and MoonWind RATs added 2017-03-30 15:01:23 +02:00
Alexandre Dulaunoy f0e42a1818 KHRAT added 2017-03-29 16:37:31 +02:00
Alexandre Dulaunoy 7ae4301ba0 Merge pull request #42 from chrisdoman/master
Added descriptions and reference to threat-actor json
2017-03-22 14:12:03 +01:00
chrisdoman dbf989c742 Added descriptions and reference to threat-actor json 2017-03-22 12:52:05 +00:00
Alexandre Dulaunoy 6ce28c8c90 JQ all 2017-03-16 23:12:11 +01:00
Raphaël Vinot e1b5701351 JQ all the things 2017-03-16 17:31:43 +01:00
Raphaël Vinot bc78bdde33 Merge pull request #41 from CERT-Bund/patch-1
Added groups, joined groups, added synonyms (see extended description)
2017-03-16 17:31:13 +01:00
Raphaël Vinot 0d8d265319 Fix typo. 2017-03-16 17:27:17 +01:00
CERT-Bund 4112a041f7 Added groups, joined groups, added synonyms (see extended description)
Added: HammerPanda, Barium, Infy, Sima, Groundbait
Joined: StrongPity and Promethium
Synonyms: Lead as Winnti, Moonlight as MoleRats, FalloutTeam as DarkHotel, DustStorm as StonePanda, Skipper and Popeye as Pacifier
2017-03-16 17:02:55 +01:00
Alexandre Dulaunoy 71ad9099c4 IMEIJ added 2017-03-13 13:59:46 +01:00
Alexandre Dulaunoy e002e62204 missing \n at the end of the file 2017-03-01 14:55:45 +01:00
Alexandre Dulaunoy 876ae24454 Merge pull request #38 from chrisdoman/master
Added references
2017-03-01 14:54:35 +01:00
Chris Doman 9e5c983a65 Ran jq 2017-03-01 13:24:00 +00:00
Chris Doman e934f88b3b Added references
Mostly added references to existing groups
Capitalised DarkHotel, put a space in APT30 default name (the others
had that)
2017-03-01 12:53:52 +00:00
Alexandre Dulaunoy a224c7ce5e add: Gamaredon Group added 2017-02-28 09:17:33 +01:00
Christophe Vandeplas 96b6f65b78 Merge pull request #37 from cvandeplas/master
minor correction
2017-02-27 11:01:16 +01:00
Christophe Vandeplas 048b831f53 minor correction 2017-02-27 11:00:48 +01:00
Alexandre Dulaunoy 1f4db6d4a1 Merge pull request #36 from Th4nat0s/gutembergII
Gutemberg II
2017-02-27 10:19:45 +01:00
Thanat0s 07cc13feb8 remove duplicate of ratdecode import 2017-02-27 00:38:39 +01:00
Thanat0s 9eb2d097f2 add a bunch of rat from ratdecoder list 2017-02-27 00:23:56 +01:00
Thanat0s 849ca3ebbc Pimp Epic turla 2017-02-26 23:38:50 +01:00
Thanat0s f1ea577e95 pimp and agreggate turla 2017-02-26 23:24:51 +01:00
Thanat0s 3774f05237 Somes alias fetch from : https://attack.mitre.org/wiki/Groups 2017-02-26 23:07:42 +01:00
Thanat0s 2d658a6577 pimp comrat 2017-02-26 22:53:51 +01:00
Thanat0s b865342f2e pimp xneteagle 2017-02-26 22:47:16 +01:00
Thanat0s f4584f3900 pimp xscontrol 2017-02-26 22:41:51 +01:00
Thanat0s b400edbe9b Update Xagent from aptnote Bitdefender-Whitepaper-APT-Mac-A4-en-EN-web(02-23-2017) 2017-02-26 20:40:44 +01:00
Thanat0s 51eee31c21 Pimp lecna/Backspace 2017-02-26 20:16:59 +01:00
Thanat0s 0d0ba42f15 Pimp lecna/Backspace 2017-02-26 20:16:46 +01:00
Thanat0s cdc80e5596 Pimp RarStone 2017-02-26 20:02:34 +01:00
Thanat0s ca68abc0e8 Pimp Pirpi. Hard to say:) 2017-02-26 19:56:17 +01:00
Thanat0s 6e78746a6c pimp webc2 2017-02-26 19:37:10 +01:00
Thanat0s 0775bfce62 pimp winnti 2017-02-26 19:26:21 +01:00
Thanat0s 8de827977c Pimp nettraveler 2017-02-26 19:21:41 +01:00
Thanat0s 7d62d8c3e7 cleanup zeus duplicate in alias and name 2017-02-26 17:08:43 +01:00
Thanat0s 93df12be35 update apt28 tools 2017-02-26 17:06:19 +01:00
Thanat0s afe682cf3f Remove duplicate AlienSpy 2017-02-26 16:52:59 +01:00
Alexandre Dulaunoy 8e1cd6364e Merge pull request #32 from Th4nat0s/donokilljson
modify validators to check json an format, stop on any error
2017-02-26 14:20:18 +01:00
Alexandre Dulaunoy 1903be8941 Merge pull request #30 from Th4nat0s/gutemberg
Gutemberg work..
2017-02-26 14:13:37 +01:00
Alexandre Dulaunoy d5025eb915 Merge pull request #33 from Th4nat0s/checkdup
Tool to find duplicate
2017-02-26 14:07:39 +01:00
Thanat0s 3073877d10 block by default, but usable anyway with param 2017-02-26 03:16:41 +01:00