MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity
1,481 Commits
6 Branches
47 Tags
73 MiB
Commit Graph

905 Commits (e398cc3ef2fda7ee8563505763d884f4c69f1516)

Author SHA1 Message Date
Alexandre Dulaunoy ed132cb1b8
chg: [threat-actor] version fixed 2019-02-21 07:18:16 +01:00
Daniel Plohmann 0cd79994cc
Two more actor names from GTR2019 
I found two more actor names while going again over the crowdstrike's report and updating the cross-references to malpedia.
 2019-02-19 22:38:11 +01:00
Daniel Plohmann 85ec27b4c4
Added missing actors from CrowdStrike GTR2019 2019-02-19 18:26:01 +01:00
Itay Cohen 7d9dc1ec9d
Fix 404'd reference of BuhTrap 2019-02-17 11:33:11 +02:00
Alexandre Dulaunoy 9ad8a76a38
chg: [ransomware] no related object in meta 2019-02-15 10:30:20 +01:00
mokaddem 34042abe23 new: Added draft of the election guildelines galaxy 2019-02-15 08:44:33 +01:00
Deborah Servili 5bf18ffd23
Merge branch 'master' into master 2019-02-14 16:29:04 +01:00
Deborah Servili 9c450a80d4
add Gallmaker and other clusters 2019-02-14 16:04:54 +01:00
Deborah Servili 2794a20589
add OSX/Shlayer and some refs 2019-02-14 12:42:28 +01:00
Alexandre Dulaunoy ad0ef66b0a
chg: [tool] jq jq jq jq jq jq jq jq 2019-02-12 21:41:33 +01:00
Thomas Dupuy 95a70d09a5 add ANEL/UPPERCUT in tool cluster 2019-02-12 12:19:23 -05:00
Deborah Servili 8aeed60a24
Add Siesta campaign 2019-02-11 16:30:46 +01:00
João Neto 662cc5a012
Updated "Iran" name 
This extra space leads to an unnecessary key error when parsing the json file
 2019-02-08 16:50:22 +01:00
Nils Kuhnert fc16f4f69c
Added Velvet Chollima as synonym to Kimsuki 2019-02-08 08:50:05 +01:00
Christophe Vandeplas e5f74c8fdc
Merge pull request #336 from 3c7/synonym/static-kitten 
Added static kitten as synonym for MuddyWater
 2019-02-07 08:54:49 +01:00
Alexandre Dulaunoy 2bbb8a6a43
Merge pull request #334 from 3c7/synonym/cobalt-spider 
Added Cobalt Spider as Synonym for Cobalt
 2019-02-07 08:53:19 +01:00
Nils Kuhnert 9778bea81e
Added Cobalt Spider reference 2019-02-07 08:41:00 +01:00
Nils Kuhnert 523a52c4db
Added static kitten as synonym for MuddyWater 2019-02-07 08:38:52 +01:00
Nils Kuhnert 0049acd81c
Added Turbine Panda as synonym for APT 26 2019-02-07 08:28:48 +01:00
Nils Kuhnert 5a077cf838
Added Cobalt Spider as Synonym for Cobalt 2019-02-07 08:26:10 +01:00
Nils Kuhnert a171d5aa9d
Added Ocean Buffalo synonym for Ocean Lotus 2019-02-03 21:36:21 +01:00
Alexandre Dulaunoy b9f1317941
Merge pull request #332 from Delta-Sierra/master 
Add APT39 & LockerGoga
 2019-02-01 18:36:12 +01:00
Nils Kuhnert 0b04046d91
Added Quilted Tiger as Synonym for Patchwork/Dropping Elephant. 2019-02-01 13:17:43 +01:00
Deborah Servili 233b7f3aff
add APT39 2019-01-31 18:48:19 +01:00
Deborah Servili b4751d396a
add LockerGoga ransomware 2019-01-30 12:07:19 +01:00
Nils Kuhnert d45a32e9e2
Added Shadow Crane as synonym for Dark Hotel. 2019-01-30 08:22:46 +01:00
Nils Kuhnert 42ecbd801c
Added "Stardust Chollima" as synonym for Lazarus. 2019-01-29 08:36:12 +01:00
Alexandre Dulaunoy 898bdaf7f8
Merge pull request #328 from Delta-Sierra/master 
add Silence Group
 2019-01-25 16:43:08 +01:00
Deborah Servili c11a31b12a
add Silence Group 2019-01-25 16:19:51 +01:00
Thomas Dupuy d38fb407ec add alternative name for DarkHydrus 2019-01-21 23:14:34 -05:00
Deborah Servili 45ed56cd61
add LoJax ref 2019-01-17 10:49:23 +01:00
Deborah Servili 3bdbd6646b
add Cold River Threat actor 2019-01-17 09:44:09 +01:00
Deborah Servili 5d61a75886
fix versions 2019-01-14 16:34:28 +01:00
Deborah Servili 61093f6f07
add several ransomware and threat actors 2019-01-14 16:28:15 +01:00
Deborah Servili 90d2bf7bc1
add drakhydrus ref 2019-01-11 10:17:07 +01:00
Deborah Servili cddfd5fcd1
TA505 threat actorand affiliates malwares 2019-01-11 09:53:08 +01:00
Deborah Servili 4547b09f49
add hidenad synonym 2019-01-10 11:53:30 +01:00
Deborah Servili a10a417b0a
add Cryptomix variants refs 2019-01-10 10:03:22 +01:00
Deborah Servili d3ae9e1e14
update version 2019-01-09 15:54:09 +01:00
Deborah Servili 90e3602db6
add AndroidOS_HidenAd 2019-01-09 15:33:34 +01:00
Deborah Servili cc0bd96527 Merge branch 'master' of https://github.com/MISP/misp-galaxy 2019-01-09 14:54:33 +01:00
Christophe Vandeplas 0ba220987d chg: [mitre] bump to latest MITRE ATT&CK dataset 2018-12-29 18:40:21 +01:00
Christophe Vandeplas 50c817a1fd
MITRE galaxy regeneration + updated migration script 2018-12-29 18:14:47 +01:00
Nils Kuhnert 1e4ebdd560
Added OilRig synonym "Helix Kitten". 2018-12-27 09:10:21 +01:00
Deborah Servili 91b8da1e9e
add ransomwares 2018-12-20 00:37:49 +01:00
Alexandre Dulaunoy de66295539
Merge pull request #316 from danielplohmann/master 
New name SNAKEMACKEREL for APT28 by Accenture
 2018-12-19 14:06:38 +01:00
Gerard Wagener 7b347017e2
Removed Puplishing industry 2018-12-19 11:45:31 +01:00
Daniel Plohmann cc22da1200 Microsoft alias for apt29 is YTTRIUM 2018-12-19 11:28:44 +01:00
Daniel Plohmann c9e15b0c08 new name SNAKEMACKEREL for APT28 by Accenture 2018-12-19 10:46:58 +01:00
Alexandre Dulaunoy 27f6b19570
Merge pull request #315 from Delta-Sierra/master 
add OSX malwares
 2018-12-18 17:43:34 +01:00
Deborah Servili e6fa06f178
add OSX malwares 2018-12-18 16:26:49 +01:00
Alexandre Dulaunoy a04790ac41
chg: [malpedia] updated to the latest version 
Ref: https://malpedia.caad.fkie.fraunhofer.de/api/get/misp
 2018-12-14 19:00:18 +01:00
Deborah Servili cb4345adf9
add operation sharpshooter 2018-12-13 13:47:54 +01:00
Deborah Servili a9265d9858
update toll version 2018-12-13 09:44:09 +01:00
Deborah Servili 9f29f297d2
add shamoon synonym 2018-12-13 09:43:20 +01:00
Deborah Servili 3a2ac48faa
fix tool version 2018-12-12 15:39:34 +01:00
Deborah Servili 3ef58f7b21
fix exploit-kit version 2018-12-12 15:38:39 +01:00
Deborah Servili 70d68a312c
add some clusters or info 2018-12-12 15:26:54 +01:00
Deborah Servili 169d69871a
add Goden Chickens and affiliates 2018-12-12 13:52:55 +01:00
Deborah Servili 3183a4d1ff
add ransomwares 2018-12-12 09:27:27 +01:00
Christophe Vandeplas 1a65dfb9f4 chg: [mitre] re-generated galaxies and values using the MITRE sources 
and also using the MISP version to keep manually created relationships and such
 2018-12-09 09:16:03 +01:00
Christophe Vandeplas 39ff6b4bbc MITRE sorted 
While dicts were sorted, lists were not yet sorted. This current sort algo is not yet the best, but is a good start. A good sort is needed for better comparison afterwards with automated tools. In a next stage tt will also be needed in the validate_all scripts.
 2018-12-09 08:32:48 +01:00
Deborah Servili bf77e1125a
add Operation Poison Needles 2018-12-07 16:32:09 +01:00
Deborah Servili 79828d7411
add clusters 2018-12-07 13:25:56 +01:00
Deborah Servili 5a725e71ef
add several clusters 2018-12-06 16:13:51 +01:00
Alexandre Dulaunoy ac2b5dbe05
fix: [ransomware] more duplicates removed 2018-12-02 12:00:17 +01:00
Alexandre Dulaunoy 2e8f139daa
fix: [ransomware] removed duplicate values 2018-12-02 11:54:34 +01:00
Deborah Servili be9b4ff40f
add DNSpionage cluster 2018-11-29 16:38:06 +01:00
Deborah Servili ef54489ea9
add everbe rasomnotes 2018-11-29 15:33:39 +01:00
Deborah Servili 6382857ee3
add ransomwares 2018-11-29 15:23:57 +01:00
Deborah Servili c81f128d98
add ransomwares 2018-11-27 15:59:26 +01:00
Deborah Servili 6f255c0999
add Aurora Ransomware metadata 2018-11-26 09:30:54 +01:00
Deborah Servili e5487305f1
add Aurora Ransomware synonym 2018-11-26 08:33:11 +01:00
Deborah Servili 9f5e10abf6
fix version 2018-11-23 16:16:58 +01:00
Deborah Servili b6b1c7171a
Add Rotexy 2018-11-23 16:15:48 +01:00
Deborah Servili dac1c08491
update version 2018-11-23 12:42:41 +01:00
Deborah Servili b50c8bd805
add PNG Dropper 2018-11-23 10:38:36 +01:00
Deborah Servili 1be4a1cedb
add reference for Emotet/Geodo 2018-11-22 09:00:43 +01:00
Deborah Servili 2bf5d46cc4 Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy 2018-11-22 08:59:53 +01:00
Deborah Servili 2f5031b845
add several references for Emotet and others 2018-11-22 08:37:45 +01:00
Deborah Servili de38e7249c
Merge branch 'master' into master 2018-11-19 15:23:45 +01:00
Deborah Servili ce61b2d2dd
update oilrig related clusters + others 2018-11-19 14:56:13 +01:00
Alexandre Dulaunoy eec7693081
chg: uuid fixed 2018-11-18 06:31:04 +01:00
Alexandre Dulaunoy d324a1c39b
Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy into Delta-Sierra-master 2018-11-18 06:29:50 +01:00
Deborah Servili eb6f6a3f49
fix rat galaxy version 2018-11-16 16:40:23 +01:00
Deborah Servili 77b556d702
jq and add ref in tool galaxy -hit version 100- 2018-11-16 13:11:55 +01:00
Deborah Servili faa16879da
add TheOneSpy 2018-11-16 13:10:21 +01:00
Alexandre Dulaunoy c9fd60d14b
chg: [threat-actor] INDRIK SPIDER added 2018-11-14 20:46:06 +01:00
Deborah Servili ca33f1c2ce Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-11-13 15:25:34 +01:00
Deborah Servili f55277b682
add several rqansomware and HookAds campaign 2018-11-13 12:20:37 +01:00
Alexandre Dulaunoy a505995b79
fix: [ransomware] duplicate removed 2018-11-13 07:12:36 +01:00
Alexandre Dulaunoy 51d3af11fc
chg: [ransomware] duplicate removed 2018-11-13 07:08:49 +01:00
Alexandre Dulaunoy a4c916c916
Merge branch 'master' of github.com:MISP/misp-galaxy 2018-11-13 07:01:56 +01:00
Benoit Sevens 8f8c69134e
Update threat-actor.json 
Add LuckyMouse link
 2018-11-12 13:12:14 +01:00
Deborah Servili 46dba06e40
add/update ransomawares 2018-11-09 16:34:00 +01:00
Deborah Servili 14444e4321
add several tools and refs 2018-11-08 10:39:32 +01:00
Daniel Plohmann 1f6b606f75
added APT38 as (FireEye) alias for Lazarus 
cross-references in https://content.fireeye.com/apt/rpt-apt38 suggest the link to Lazarus.
 2018-11-07 17:19:50 +01:00
Deborah Servili 954264c084
Merge pull request #296 from Delta-Sierra/master 
update ransomware galaxy
 2018-11-07 09:19:23 +01:00
Deborah Servili d41a279c73
update ransomware galaxy 2018-11-05 16:23:10 +01:00
Alexandre Dulaunoy 8ae3214cd1
Merge pull request #295 from Delta-Sierra/master 
update Red Alert 2 Android Banking Trojan
 2018-11-05 12:37:29 +01:00