misp-modules

Commit Graph

Author	SHA1	Message	Date
Georg Schölly	04685ea63e	joe: (1) allow users to disable PE object import (2) set 'to_ids' to False	3 years ago
Stefano Ortolani	66bf650b79	change: migrate to analysis API when submitting tasks to Lastline	3 years ago
Koen Van Impe	036933ea14	2nd fix for VT Public module	3 years ago
Koen Van Impe	610c99ce7b	Fix error message in Public VT module	3 years ago
chrisr3d	31a74a10c1	fix: Fixed ipasn test input format + module version updated	3 years ago
chrisr3d	b3bc533bc3	chg: Making ipasn module return asn object(s) - Latest changes on the returned value as string broke the freetext parser, because no asn number could be parsed when we return the full json blob as a freetext attribute - Now returning asn object(s) with a reference to the initial attribute	3 years ago
chrisr3d	f5452055f6	fix: Fixed vt_graph imports	3 years ago
chrisr3d	70b3079aa3	fix: Fixed pep8 in the new module and related libraries	3 years ago
Alvaro Garcia	10b4e78704	add vt_graph export module	3 years ago
Erick Cheng	bfcba18e3c	Update ipasn.py	3 years ago
chrisr3d	cf5ad29f27	chg: Checking attributes category - We check the category before adding the attribute to the event - Checking if the category is correct and if not, doing a case insensitive check - If the category is not correct after the 2 first tests, we simply delete it from the attribute and pymisp will give the attribute a default category value based on the atttribute type, at the creation of the attribute	3 years ago
chrisr3d	7945d060ff	new: Enrichment module for querying APIVoid with domain attributes	3 years ago
chrisr3d	2fc0b44b90	fix: Making pep8 happy with whitespace after ':'	3 years ago
chrisr3d	3007761a55	fix: Making pep8 happy by having spaces around '+' operators	3 years ago
chrisr3d	5f90ae776f	fix: Making pep8 happy	3 years ago
chrisr3d	b8d6141cb7	chg: Made circl_passivedns module able to return MISP objects	3 years ago
chrisr3d	9c9f01b6ff	fix: Quick variable name fix	3 years ago
chrisr3d	6849daebfa	chg: Made circl_passivessl module able to return MISP objects	3 years ago
Raphaël Vinot	b70c32af7b	fix: Somewhat broken emails needed some love	3 years ago
Raphaël Vinot	6f95445143	chg: Update email import module, support objects	3 years ago
Stefano Ortolani	f749578525	add: Modules to query/import/submit data from/to Lastline	3 years ago
Raphaël Vinot	5d7a829583	chg: Use MISPObject in ransomcoindb	3 years ago
aaronkaplan	06025e63d0	oops , use relative import	3 years ago
aaronkaplan	d73a9b601a	use a helpful user-agent string	3 years ago
aaronkaplan	777483838b	Revert "fix url" This reverts commit `44130e2bf9`.	3 years ago
aaronkaplan	44130e2bf9	fix url	3 years ago
aaronkaplan	24ec4a0e23	remove pprint	3 years ago
aaronkaplan	5350003e3a	initial version of the ransomcoindb expansion module	3 years ago
chrisr3d	ccf12a225c	fix: Making pep8 happy	3 years ago
chrisr3d	96712da5e0	add: Module to query AssemblyLine and parse the results - Takes an AssemblyLine submission link to query the API and get the full submission report - Parses the potentially malicious files and the IPs, domains or URLs they are connecting to - Possible improvement of the parsing filters in order to include more data in the MISP event	3 years ago
chrisr3d	de8737d2f3	fix: Fixed input types list since domain should not be submitted to AssemblyLine	3 years ago
chrisr3d	dc9ea98d2c	fix: Making pep8 happy	3 years ago
chrisr3d	58a4cb15a1	add: New expansion module to submit samples and urls to AssemblyLine	3 years ago
chrisr3d	f08fc6d9a5	chg: Reintroducing the limit to reduce the number of recursive calls to the API when querying for a domain	3 years ago
chrisr3d	4990bcebd8	fix: Avoiding KeyError exception when no result is found	3 years ago
chrisr3d	91d6f1baa0	fix: Fixed csv file parsing	3 years ago
chrisr3d	0fd3f92fe3	fix: Fixed Xforce Exchange authentication + rework - Now able to return MISP objects - Support of the xforce exchange authentication with apikey & apipassword	3 years ago
chrisr3d	852018bf79	fix: Added urlscan & secuirtytrails modules in __init__ list	3 years ago
chrisr3d	bfe227d555	fix: More clarity on the exception raised on the securitytrails module	3 years ago
chrisr3d	69e81b47d7	fix: Better exceptions handling on the passivetotal module	3 years ago
chrisr3d	4411166b43	fix: Fixed config parsing and the associated error message	3 years ago
chrisr3d	4f70011edf	fix: Fixed config parsing + results parsing - Avoiding errors with config field when it is empty or the apikey is not set - Parsing all the results instead of only the first one	3 years ago
Braden Laverick	717be2b859	Removed extraneous comments and unused imports	3 years ago
chrisr3d	b63a0d1eb8	fix: Making urlscan module available in MISP for ip attributes - As expected in the the handler function	3 years ago
chrisr3d	d4eb88c66a	fix: Avoiding various modules to fail with uncritical issues - Avoiding securitytrails to fail with an unavailable feature for free accounts - Avoiding urlhaus to fail with input attribute fields that are not critical for the query and results - Avoiding VT modules to fail when a certain resource does not exist in the dataset	3 years ago
chrisr3d	393b33d02d	fix: Fixed config field parsing for various modules - Same as previous commit	3 years ago
Braden Laverick	dc4c09f751	Fixed python links	3 years ago
Braden Laverick	62d25b1f76	Changed file name to mass eql export	3 years ago
Braden Laverick	08fc938acd	Fixed comments	3 years ago
chrisr3d	d0ddfb3355	fix: [expansion] Better config field handling for various modules - Testing if config is present before trying to look whithin the config field - The config field should be there when the module is called form MISP, but it is not always the case when the module is queried from somewhere else	3 years ago

1 2 3 4 5 ...

708 Commits (1de689015206b1d7a1ad04ae89d1e14b6989ad8f)