misp-modules

Commit Graph

Author	SHA1	Message	Date
Raphaël Vinot	8fc5b1fd1f	fix: Make pep8 happy	4 years ago
Christophe Vandeplas	8817de4765	fix: threatanalyzer_import - bugfix for TA6.1 behavior	4 years ago
Christophe Vandeplas	7deeb95820	fix: ta_import - bugfixes	4 years ago
Christophe Vandeplas	8d4e2025f7	ta_import - bugfixes for TA 6.1	4 years ago
Christophe Vandeplas	2f27ff1244	ta_import - support for TheatAnalyzer 6.1	4 years ago
Steve Clement	562a6b1308	- Removed test modules from view - Moved skeleton expansion module to it's proper place	4 years ago
Steve Clement	549f32547d	- Reverted to <3.6 compatibility	4 years ago
Steve Clement	9f0313a97e	- Fixed log output	4 years ago
Steve Clement	184065cf74	- Forgot to import sys	4 years ago
Steve Clement	ffce2aa5cc	- Added logger functionality for debug sessions	4 years ago
Steve Clement	2f5dd9928e	- content was already a wand.obj	4 years ago
Steve Clement	ef3837077e	- Some more comments - Removed libmagic, wand can handle it better	4 years ago
Christophe Vandeplas	ff793bc221	threatanalyzer_import - order of category tuned	4 years ago
Steve Clement	fbb3617f25	- Quick comment ToDo: Avoid using Magic in future releases	4 years ago
Steve Clement	60a3fbe282	- added wand requirement - fixed missing return png byte-stream - move module import to handler to catch and report errorz	4 years ago
Steve Clement	7885017981	- fixed typo move image back in scope	4 years ago
chrisr3d	7dd8e988c0	Updated the list of modules (removed stiximport)	4 years ago
Steve Clement	59b7688bdc	- Added initial PDF support, nothing is processed yet - Test to replace PIL with wand	4 years ago
chrisr3d	2b509a2fd3	Updated delimiter finder function	4 years ago
chrisr3d	1fb72f3c7a	add: Added user config to specify if there is a header in the csv to import	4 years ago
chrisr3d	dba8bd8c5b	fix: Avoid trying to build attributes with not intended fields - Previously: if the header field is not an attribute type, then it was added as an attribute field. PyMISP then used to skip it if needed - Now: Those fields are discarded before they are put in an attribute	4 years ago
chrisr3d	c088b13f03	fix: Using userConfig to define the header instead of moduleconfig	4 years ago
Christophe Vandeplas	0593dbb408	ta import - more filter for pollution	4 years ago
Christophe Vandeplas	67cecc89d0	threatanalyzer_import - minor generic noise removal	4 years ago
Christophe Vandeplas	7b4db1ce5c	threatanalyzer_import - minor generic noise removal	4 years ago
Christophe Vandeplas	27a22e5d86	threatanalyzer_import - loads sample info + pollution fix	4 years ago
Christophe Vandeplas	370011c081	threatanalyzer_import - fix regkey issue	4 years ago
Koen Van Impe	6d23d4f4c7	Fix VMRay API access error hotfix for the "Unable to access VMRay API" error	4 years ago
chrisr3d	d885286792	Clarified functions arguments using a class	4 years ago
chrisr3d	4d7642ac91	add: Added Object References in the objects imported	5 years ago
chrisr3d	82fe8ba78c	fix: Fixed input & output of the module	5 years ago
chrisr3d	c9ef578262	Removed print	5 years ago
chrisr3d	e6c55f5dde	fix: Fixed input & output of the module Also updated some functions	5 years ago
chrisr3d	03d20856d9	add: added goamlimport	5 years ago
chrisr3d	323f71cdd3	Fixed some details about the module output	5 years ago
chrisr3d	8f5c08e2c6	Converting GoAML into MISPEvent	5 years ago
chrisr3d	cad62464c5	Now parsing all the transaction attributes	5 years ago
chrisr3d	478cd53912	add: Added dictionary to map aml types into MISP types	5 years ago
chrisr3d	81a6be17d3	chg: Structurded data	5 years ago
chrisr3d	f361fb4ee3	Reading the entire document, to create a big dictionary containing the data, as a beginning	5 years ago
Thomas Gardner	69d733bb35	added csvimport to __init__.py	5 years ago
chrisr3d	71c00954d0	fix: Solved reading problems for some files	5 years ago
chrisr3d	b2ec186ccb	Updated delimiter finder method	5 years ago
chrisr3d	529d22cca8	fix: skipping empty lines	5 years ago
chrisr3d	56cbd72b65	Fixed data treatment & other updates	5 years ago
chrisr3d	4d846f968f	Updated delimiter parsing & data reading functions	5 years ago
chrisr3d	b9d72bb043	First version of csv import module - If more than 1 misp type is recognized, for each one an attribute is created - Needs to have header set by user as parameters of the module atm - Review needed to see the feasibility with fields that can create confusion and be interpreted both as misp type or attribute field (for instance comment is a misp type and an attribute field)	5 years ago
Christophe Vandeplas	46975f4f16	Added ThreatAnalyzer sandbox import Experimental module - some parts should be migrated to	5 years ago
Raphaël Vinot	951a0f974b	fix: OpenIOC importer	5 years ago
seamus tuohy	40c71af637	Added support for malformed internationalized email headers When an emails contains headers that use Unicode without properly crafing them to comform to RFC-6323 the email import module would crash. (See issue #119 & issue #93) To address this I have added additional layers of encoding/decoding to any possibly internationalized email headers. This decodes properly formed and malformed UTF-8, UTF-16, and UTF-32 headers appropriately. When an unknown encoding is encountered it is returned as an 'encoded-word' per RFC2047. This commit also adds unit-tests that tests properly formed and malformed UTF-8, UTF-16, UTF-32, and CJK encoded strings in all header fields; UTF-8, UTF-16, and UTF-32 encoded message bodies; and emoji testing for headers and attachment file names.	5 years ago

1 2

95 Commits (0189a117a3c2839e73173e69f1e0659df1c4bd02)