From 27cec2ecd81b78736d333c18a180cd25c5b5d510 Mon Sep 17 00:00:00 2001 From: Milo Volpicelli Date: Tue, 7 Nov 2023 15:41:46 +0000 Subject: [PATCH] documentation and logos --- docs/logos/cluster25.png | Bin 0 -> 3697 bytes documentation/logos/cluster25.png | Bin 0 -> 3697 bytes .../website/expansion/cluster25_expand.json | 14 ++++++++++++++ 3 files changed, 14 insertions(+) create mode 100644 docs/logos/cluster25.png create mode 100644 documentation/logos/cluster25.png create mode 100644 documentation/website/expansion/cluster25_expand.json diff --git a/docs/logos/cluster25.png b/docs/logos/cluster25.png new file mode 100644 index 0000000000000000000000000000000000000000..e201ca3d80edbc27abe96f8d7ff1eca68e53e46c GIT binary patch literal 3697 zcmaJ^S5%XW()~gpU`Uhzk_bvDQiV_r2qFPPuhIiTD2FP7g|0$CQAA4U(nBxOREh+o zOYa>NrAkqXAiZ7A|McINyJpYKTC?V9Kg{g?T3=TU4rPY|007re#~YmWhJTX*a#jt# zxze9Ch^>|y9yt9sD4+9U0N^~o242a?XL2>w*T`gqy|sSiRK~QO%Ql|@%@EQpEGYQxhSSIO+KsMg~JvU9vp4#h#}yx{Y03dxDYwLW#|WO)r2 zwJz_N{y5FC_y>BT%;d1P&wIyr_pt7(wa*I?k<00oWsf3U@2{3uR8%}Rzjx2>R#t=( zz<{4R9*?z^PHYp2v}}%9L3?3}MT^7VjRzD#-!K|!UW~Ni?COE~YjNbEcEl3wK!K`) za}vk0?@x{Ham*R)hz;8fkXrK>-}l(n4lFsIHb{!F_Dk>T^e zOp2*Dn^PXLya9VC@2B4in@HG{H)Ev;_;@Wv-c&S5#YGAkET=RywW5N*0Ddpf@t4-p zH*6(H7!3!Acv`D6keZ7(tOh~LP`JE#4*hY+-@7=+1|C2G33(M&b*Bx# zaw^0eo;}-+Ek6&g?A+-x(8dy_6xC5Q5uS=H+2p# zT+W@ppFSA+!jo0enO_AK!M$6eWafy%!M@$35n3buDfjE4_n7}`7n_`{_b7y8;nkd? z#?K__1<%cOM8qNp{5HLJ4J7S9d$0Ui8-|*etj1H2ogG^@=^bK~{xRffP4J9wBaqAe zY1i7k&Q>&4-aBnL``*}xY?&5H25(1UI3o<;MAxs`ls_`&vA16!vl*G0i6q+K@T@R^ zJ=gNEMA~!muAJ|Rv@-!IW|>j#F2b#rg@yrP^Q#=1>wNx#_Qb#0D=RL`7X0F}G?0GY zqsD;BUs^)P`HmxFV?!D4by?iav(~`pr^B1B=K?nR(>+siOn4zG&477JSDwuA?vO%& zJSpe|bE3L5;wT8C(EXP8(|mH2l*Eqrl4=PM#JW#ts3y3Hlgxd6yIDK?#PHHp8^ej{ z62e!nm!M%~(^4ysy>AAQhuXsO*N&}E7WxwKDnExp_%*e= zyTvt+rT#nk0&RD&zdsF_p{arU{rIo0B8w{FoM?9xu49>q?Jale5H2h(zKs{ozMwcM z{5M|xBgE;@6)9ADL8vqqZP+nUK@a0Xa;9+?Ueg<;N=khUKEm{;fP93&V(Y;zgRfZx zIx17;Vb*Jrmf5mjh8DU^gGEb6!$7uk{OWwQWHVt51|i2+cn*wLiBuAeBo!7GX8MD9 zq9E4=qQoLpHy8!Kt2GMPPG4>at7Y1j3?l05q~AabH2%CQ?TVVJdqy9{PZ=%IQWhl> z4n2+!)X}D7p99<7TgKspJE%6tX)6+1P59^q z=F!0wKk?@MNt4Lo9~1grjfH2d)DS#AS*>9TQL=qaTxh9T6=xslzFK?CnF+7 zRxcL%jr?n@6m;JI87)G9Jgh%fdI=0e|6%6Q<(jfHoNdG0ea$F2Z;PMrl3uOwZ4!^M zBvsA&aenT3*{~9|oFgM7E1w`2e)$4;$<0IV$tt}iRrB*E)KgDgm-EJ#J`(6}(Cuzn zXa_Z7`joN6T_hM(u6w8?F?bIR`XP=HcJ?+32TjWR3FVedK(DNf) z=}e6qu^Jt83hgEjwJeL{9uq436nOMI27ea1K(CJ|O;osk*j}RpOTP*W)5d2gQ%x+i z5Oga13h0gfzgj5D4I}{vjl+&jWwkdkf4m&+8O9C=Q)X1|PT4H?N_@$2kmp-V^ol5w z^9Tl!50O$+Hx|zgrJ5Hb4O)N`g(gHe)JbPwl;9FfGgL}8R?|aKByx3=wFrb8p=3)l z{JzL`p-iR8ch$zrg-R1&9oLnNJUaid$$AHh7>g??n?lMia70YUBIf1^;v{{flYpDD zb*Fljd)+G#KCnLGImVt#+`bh&WD0zoL<-V^oKWWsu9>@WB8J2QRFKuX|kTSSHf>*+S~ zA;+-q8Z(NtH5n#@$Z;4v#}bcCX0KN`v?2Z2JtZ%D{#mnJNhe-i(-*}OHHL3X5a1iD z18AmVeiN(vSKt?yvZ^E|FND1W^#gY1#$^)x4^?tdxjAg$>0Gs;f|n!PdTu{aEPOM0 z8&oVQ^)r3uDBhN(%lS{wBjYO}`_DYpe?T^N;41S;>g%T842Ygf`&tKB-05N_Q#C)i zp!Ka_V0cWaKYV)TQf50H@*07WVuE>R*2`f0*yir;gJGJE*Txp6tl8&UK4#pu0dCBc z-la{$If8zFr$ga-yDAl)BYbGMXJtKgI7l*fTpKNo5C5{F00;?W4Y&rD(G4bp_)ni; zQ|+ge9&K)kA(xon#Tv=ikABOEQsLWUF!=~_=&=ehEMg0}P{p1bRH&D ^a+DthQas<3#3ko-lgDf>l_(hO6co}Z5n>g-dy`6R76~FyrbZm_G zk&pT)(*owM1|ZcqpIOeUgtSB70j3R<6_OB1Y)+y zScn1}pA@~_o!Axyn=6_K))w#GTd-Dx=<~d)+)Qzo!)58S5Es8pHoj5*u*DRn32(EP z*=hiwb6Xv5v{}q^1ARw9f0mT*k`XcpP(cgbr8g!sK``zTb(ck5C1fd=pnW}00UE~D z%jb*c7F?*ky3T~@UcDs#Vu z>11mKvQ+g{;m^A#1-8^x7MHh--(S;j0j|jT4o%fmglHyKWMmqo5l&qH&SBK^HD59E_SxZHEL4s_Pae|Bpki#q%%6B3dx%@UPQ=`Fhz zRL8%<%TSl3Qfb9~b`i=P6N4&#MYGx;?^u?HUw`XfT3f88y{#}U?Up2bLCw>X`5UTN z>gU{iC7q9dtz|_YCuDkDHfFc7kEvTPdRs#y?m*NUfPdp>As^vkdxb-+Kr}?h5h=fG%h{n%QZk1{-h^(fe( zrlXLn+cEqcOLBV?$z?|U?LAOw6~Jn^-C8hleo|{|H~;>y!-`O8{!#IP za^3&^g)3I`NS%6;`mt|fvuJvCh`E=CjW z;HkL7TixyV#`P|BX1@WD+-3i?!CYoj_U|k8SEz{HPW!2P^Cs89%do7&*z1K#oUo#-=dmDA!UiX8c;QcpG8yerD zDO?&yOb%A(WOO=kwQ7-6o;rJ6#aWd2BlX#f&E>9Ij~bl>ToEq}0R9`K9r(r(W0oK< zuVJm5WNOTr{<%y@LY|TFHi{)bv;w1SE5x@DTgEq>^pytAE*C94Uhb$aa{ueer89~^ zfqfZ?s^a#G^U-fCfV08VAN$AeS@CJW!Jj;7?&riU0tM?;QqE&@<^J~%EP}Me01J7U zr?g-I4E#?p=sckpGwu<+56g;Z<7)y$vmNzmMa{~iBmBKnT<-lcGR)|xslZ;npF6{A z#Y{DWL-Y|x2_Cc8q@2bUp9n4brRjr+1_r`YpRv#3?c1Bn;fr)gLdy?x@ zRKwG>pG{2B_PR1(AH8&Dto|P;O5kA|Zjx@n9HhPN%qB#)!KPDQ1_RWVR-e#I4bIot zz)P|JJP(e0e3gx63Bh(KhWghGIRxAZrUS`kg|^iNb`4H`f-=&0Z2xk<|Mcrdjd{h& zChV}8!wf}X={&Jn9Gu)J6S<#aJN_fTZ59YO?6Xyv>?fOg{RT$eyhp zq<>}K@%v)*0mX}f&I9+U2`hwMZ*!82oKW06(pd_?dBuHE@Qz_P^N@gsiY~rH**fSy DS)#z8 literal 0 HcmV?d00001 diff --git a/documentation/logos/cluster25.png b/documentation/logos/cluster25.png new file mode 100644 index 0000000000000000000000000000000000000000..e201ca3d80edbc27abe96f8d7ff1eca68e53e46c GIT binary patch literal 3697 zcmaJ^S5%XW()~gpU`Uhzk_bvDQiV_r2qFPPuhIiTD2FP7g|0$CQAA4U(nBxOREh+o zOYa>NrAkqXAiZ7A|McINyJpYKTC?V9Kg{g?T3=TU4rPY|007re#~YmWhJTX*a#jt# zxze9Ch^>|y9yt9sD4+9U0N^~o242a?XL2>w*T`gqy|sSiRK~QO%Ql|@%@EQpEGYQxhSSIO+KsMg~JvU9vp4#h#}yx{Y03dxDYwLW#|WO)r2 zwJz_N{y5FC_y>BT%;d1P&wIyr_pt7(wa*I?k<00oWsf3U@2{3uR8%}Rzjx2>R#t=( zz<{4R9*?z^PHYp2v}}%9L3?3}MT^7VjRzD#-!K|!UW~Ni?COE~YjNbEcEl3wK!K`) za}vk0?@x{Ham*R)hz;8fkXrK>-}l(n4lFsIHb{!F_Dk>T^e zOp2*Dn^PXLya9VC@2B4in@HG{H)Ev;_;@Wv-c&S5#YGAkET=RywW5N*0Ddpf@t4-p zH*6(H7!3!Acv`D6keZ7(tOh~LP`JE#4*hY+-@7=+1|C2G33(M&b*Bx# zaw^0eo;}-+Ek6&g?A+-x(8dy_6xC5Q5uS=H+2p# zT+W@ppFSA+!jo0enO_AK!M$6eWafy%!M@$35n3buDfjE4_n7}`7n_`{_b7y8;nkd? z#?K__1<%cOM8qNp{5HLJ4J7S9d$0Ui8-|*etj1H2ogG^@=^bK~{xRffP4J9wBaqAe zY1i7k&Q>&4-aBnL``*}xY?&5H25(1UI3o<;MAxs`ls_`&vA16!vl*G0i6q+K@T@R^ zJ=gNEMA~!muAJ|Rv@-!IW|>j#F2b#rg@yrP^Q#=1>wNx#_Qb#0D=RL`7X0F}G?0GY zqsD;BUs^)P`HmxFV?!D4by?iav(~`pr^B1B=K?nR(>+siOn4zG&477JSDwuA?vO%& zJSpe|bE3L5;wT8C(EXP8(|mH2l*Eqrl4=PM#JW#ts3y3Hlgxd6yIDK?#PHHp8^ej{ z62e!nm!M%~(^4ysy>AAQhuXsO*N&}E7WxwKDnExp_%*e= zyTvt+rT#nk0&RD&zdsF_p{arU{rIo0B8w{FoM?9xu49>q?Jale5H2h(zKs{ozMwcM z{5M|xBgE;@6)9ADL8vqqZP+nUK@a0Xa;9+?Ueg<;N=khUKEm{;fP93&V(Y;zgRfZx zIx17;Vb*Jrmf5mjh8DU^gGEb6!$7uk{OWwQWHVt51|i2+cn*wLiBuAeBo!7GX8MD9 zq9E4=qQoLpHy8!Kt2GMPPG4>at7Y1j3?l05q~AabH2%CQ?TVVJdqy9{PZ=%IQWhl> z4n2+!)X}D7p99<7TgKspJE%6tX)6+1P59^q z=F!0wKk?@MNt4Lo9~1grjfH2d)DS#AS*>9TQL=qaTxh9T6=xslzFK?CnF+7 zRxcL%jr?n@6m;JI87)G9Jgh%fdI=0e|6%6Q<(jfHoNdG0ea$F2Z;PMrl3uOwZ4!^M zBvsA&aenT3*{~9|oFgM7E1w`2e)$4;$<0IV$tt}iRrB*E)KgDgm-EJ#J`(6}(Cuzn zXa_Z7`joN6T_hM(u6w8?F?bIR`XP=HcJ?+32TjWR3FVedK(DNf) z=}e6qu^Jt83hgEjwJeL{9uq436nOMI27ea1K(CJ|O;osk*j}RpOTP*W)5d2gQ%x+i z5Oga13h0gfzgj5D4I}{vjl+&jWwkdkf4m&+8O9C=Q)X1|PT4H?N_@$2kmp-V^ol5w z^9Tl!50O$+Hx|zgrJ5Hb4O)N`g(gHe)JbPwl;9FfGgL}8R?|aKByx3=wFrb8p=3)l z{JzL`p-iR8ch$zrg-R1&9oLnNJUaid$$AHh7>g??n?lMia70YUBIf1^;v{{flYpDD zb*Fljd)+G#KCnLGImVt#+`bh&WD0zoL<-V^oKWWsu9>@WB8J2QRFKuX|kTSSHf>*+S~ zA;+-q8Z(NtH5n#@$Z;4v#}bcCX0KN`v?2Z2JtZ%D{#mnJNhe-i(-*}OHHL3X5a1iD z18AmVeiN(vSKt?yvZ^E|FND1W^#gY1#$^)x4^?tdxjAg$>0Gs;f|n!PdTu{aEPOM0 z8&oVQ^)r3uDBhN(%lS{wBjYO}`_DYpe?T^N;41S;>g%T842Ygf`&tKB-05N_Q#C)i zp!Ka_V0cWaKYV)TQf50H@*07WVuE>R*2`f0*yir;gJGJE*Txp6tl8&UK4#pu0dCBc z-la{$If8zFr$ga-yDAl)BYbGMXJtKgI7l*fTpKNo5C5{F00;?W4Y&rD(G4bp_)ni; zQ|+ge9&K)kA(xon#Tv=ikABOEQsLWUF!=~_=&=ehEMg0}P{p1bRH&D ^a+DthQas<3#3ko-lgDf>l_(hO6co}Z5n>g-dy`6R76~FyrbZm_G zk&pT)(*owM1|ZcqpIOeUgtSB70j3R<6_OB1Y)+y zScn1}pA@~_o!Axyn=6_K))w#GTd-Dx=<~d)+)Qzo!)58S5Es8pHoj5*u*DRn32(EP z*=hiwb6Xv5v{}q^1ARw9f0mT*k`XcpP(cgbr8g!sK``zTb(ck5C1fd=pnW}00UE~D z%jb*c7F?*ky3T~@UcDs#Vu z>11mKvQ+g{;m^A#1-8^x7MHh--(S;j0j|jT4o%fmglHyKWMmqo5l&qH&SBK^HD59E_SxZHEL4s_Pae|Bpki#q%%6B3dx%@UPQ=`Fhz zRL8%<%TSl3Qfb9~b`i=P6N4&#MYGx;?^u?HUw`XfT3f88y{#}U?Up2bLCw>X`5UTN z>gU{iC7q9dtz|_YCuDkDHfFc7kEvTPdRs#y?m*NUfPdp>As^vkdxb-+Kr}?h5h=fG%h{n%QZk1{-h^(fe( zrlXLn+cEqcOLBV?$z?|U?LAOw6~Jn^-C8hleo|{|H~;>y!-`O8{!#IP za^3&^g)3I`NS%6;`mt|fvuJvCh`E=CjW z;HkL7TixyV#`P|BX1@WD+-3i?!CYoj_U|k8SEz{HPW!2P^Cs89%do7&*z1K#oUo#-=dmDA!UiX8c;QcpG8yerD zDO?&yOb%A(WOO=kwQ7-6o;rJ6#aWd2BlX#f&E>9Ij~bl>ToEq}0R9`K9r(r(W0oK< zuVJm5WNOTr{<%y@LY|TFHi{)bv;w1SE5x@DTgEq>^pytAE*C94Uhb$aa{ueer89~^ zfqfZ?s^a#G^U-fCfV08VAN$AeS@CJW!Jj;7?&riU0tM?;QqE&@<^J~%EP}Me01J7U zr?g-I4E#?p=sckpGwu<+56g;Z<7)y$vmNzmMa{~iBmBKnT<-lcGR)|xslZ;npF6{A z#Y{DWL-Y|x2_Cc8q@2bUp9n4brRjr+1_r`YpRv#3?c1Bn;fr)gLdy?x@ zRKwG>pG{2B_PR1(AH8&Dto|P;O5kA|Zjx@n9HhPN%qB#)!KPDQ1_RWVR-e#I4bIot zz)P|JJP(e0e3gx63Bh(KhWghGIRxAZrUS`kg|^iNb`4H`f-=&0Z2xk<|Mcrdjd{h& zChV}8!wf}X={&Jn9Gu)J6S<#aJN_fTZ59YO?6Xyv>?fOg{RT$eyhp zq<>}K@%v)*0mX}f&I9+U2`hwMZ*!82oKW06(pd_?dBuHE@Qz_P^N@gsiY~rH**fSy DS)#z8 literal 0 HcmV?d00001 diff --git a/documentation/website/expansion/cluster25_expand.json b/documentation/website/expansion/cluster25_expand.json new file mode 100644 index 0000000..d41c212 --- /dev/null +++ b/documentation/website/expansion/cluster25_expand.json @@ -0,0 +1,14 @@ +{ + "description": "Module to query Cluster25 CTI.", + "logo": "cluster25.png", + "requirements": [ + "A Cluster25 API access (API id & key)" + ], + "input": "An Indicator value of type included in the following list:\n- domain\n- email-src\n- email-dst\n- filename\n- md5\n- sha1\n- sha256\n- ip-src\n- ip-dst\n- url\n- vulnerability\n- btc\n- xmr\n ja3-fingerprint-md5", + "output": "A series of c25 MISP Objects with colletion of attributes mapped from Cluster25 CTI query result.", + "references": [ + "" + ], + "features": "This module takes a MISP attribute value as input to query the Cluster25CTI API. The result is then mapped into compatible MISP Objects and relative attributes.\n" +} +