misp-modules

Commit Graph

Author	SHA1	Message	Date
Georg Schölly	04685ea63e	joe: (1) allow users to disable PE object import (2) set 'to_ids' to False	3 years ago
Stefano Ortolani	66bf650b79	change: migrate to analysis API when submitting tasks to Lastline	3 years ago
Koen Van Impe	036933ea14	2nd fix for VT Public module	3 years ago
Koen Van Impe	610c99ce7b	Fix error message in Public VT module	3 years ago
chrisr3d	31a74a10c1	fix: Fixed ipasn test input format + module version updated	3 years ago
chrisr3d	b3bc533bc3	chg: Making ipasn module return asn object(s) - Latest changes on the returned value as string broke the freetext parser, because no asn number could be parsed when we return the full json blob as a freetext attribute - Now returning asn object(s) with a reference to the initial attribute	3 years ago
Erick Cheng	bfcba18e3c	Update ipasn.py	3 years ago
chrisr3d	7945d060ff	new: Enrichment module for querying APIVoid with domain attributes	3 years ago
chrisr3d	2fc0b44b90	fix: Making pep8 happy with whitespace after ':'	3 years ago
chrisr3d	3007761a55	fix: Making pep8 happy by having spaces around '+' operators	3 years ago
chrisr3d	5f90ae776f	fix: Making pep8 happy	3 years ago
chrisr3d	b8d6141cb7	chg: Made circl_passivedns module able to return MISP objects	3 years ago
chrisr3d	9c9f01b6ff	fix: Quick variable name fix	3 years ago
chrisr3d	6849daebfa	chg: Made circl_passivessl module able to return MISP objects	3 years ago
Stefano Ortolani	f749578525	add: Modules to query/import/submit data from/to Lastline	4 years ago
Raphaël Vinot	5d7a829583	chg: Use MISPObject in ransomcoindb	4 years ago
aaronkaplan	06025e63d0	oops , use relative import	4 years ago
aaronkaplan	d73a9b601a	use a helpful user-agent string	4 years ago
aaronkaplan	777483838b	Revert "fix url" This reverts commit `44130e2bf9`.	4 years ago
aaronkaplan	44130e2bf9	fix url	4 years ago
aaronkaplan	24ec4a0e23	remove pprint	4 years ago
aaronkaplan	5350003e3a	initial version of the ransomcoindb expansion module	4 years ago
chrisr3d	ccf12a225c	fix: Making pep8 happy	4 years ago
chrisr3d	96712da5e0	add: Module to query AssemblyLine and parse the results - Takes an AssemblyLine submission link to query the API and get the full submission report - Parses the potentially malicious files and the IPs, domains or URLs they are connecting to - Possible improvement of the parsing filters in order to include more data in the MISP event	4 years ago
chrisr3d	de8737d2f3	fix: Fixed input types list since domain should not be submitted to AssemblyLine	4 years ago
chrisr3d	dc9ea98d2c	fix: Making pep8 happy	4 years ago
chrisr3d	58a4cb15a1	add: New expansion module to submit samples and urls to AssemblyLine	4 years ago
chrisr3d	f08fc6d9a5	chg: Reintroducing the limit to reduce the number of recursive calls to the API when querying for a domain	4 years ago
chrisr3d	4990bcebd8	fix: Avoiding KeyError exception when no result is found	4 years ago
chrisr3d	0fd3f92fe3	fix: Fixed Xforce Exchange authentication + rework - Now able to return MISP objects - Support of the xforce exchange authentication with apikey & apipassword	4 years ago
chrisr3d	852018bf79	fix: Added urlscan & secuirtytrails modules in __init__ list	4 years ago
chrisr3d	bfe227d555	fix: More clarity on the exception raised on the securitytrails module	4 years ago
chrisr3d	69e81b47d7	fix: Better exceptions handling on the passivetotal module	4 years ago
chrisr3d	4411166b43	fix: Fixed config parsing and the associated error message	4 years ago
chrisr3d	4f70011edf	fix: Fixed config parsing + results parsing - Avoiding errors with config field when it is empty or the apikey is not set - Parsing all the results instead of only the first one	4 years ago
Braden Laverick	717be2b859	Removed extraneous comments and unused imports	4 years ago
chrisr3d	b63a0d1eb8	fix: Making urlscan module available in MISP for ip attributes - As expected in the the handler function	4 years ago
chrisr3d	d4eb88c66a	fix: Avoiding various modules to fail with uncritical issues - Avoiding securitytrails to fail with an unavailable feature for free accounts - Avoiding urlhaus to fail with input attribute fields that are not critical for the query and results - Avoiding VT modules to fail when a certain resource does not exist in the dataset	4 years ago
chrisr3d	393b33d02d	fix: Fixed config field parsing for various modules - Same as previous commit	4 years ago
chrisr3d	d0ddfb3355	fix: [expansion] Better config field handling for various modules - Testing if config is present before trying to look whithin the config field - The config field should be there when the module is called form MISP, but it is not always the case when the module is queried from somewhere else	4 years ago
Braden Laverick	c1ca936910	Fixed syntax error	4 years ago
Braden Laverick	c06ceedfb8	Changed to single attribute EQL	4 years ago
Braden Laverick	a426ad249d	Added EQL enrichment module	4 years ago
chrisr3d	dc7463a67e	fix: Avoid issues when some config fields are not set	4 years ago
Alexandre Dulaunoy	dec2494a0a	chg: [apiosintds] make flake8 happy	4 years ago
chrisr3d	7a56174c40	fix: Fixed Geoip with the supported python library + fixed Geolite db path management	4 years ago
milkmix	bdc5282e09	updated to geoip2 to support mmdb format	4 years ago
Davide	56e16dbaf5	Added apiosintDS module to query OSINT.digitalside.it services	4 years ago
chrisr3d	e1602fdca9	fix: Updates following the latest CVE-search version - Support of the new vulnerable configuration field for CPE version > 2.2 - Support of different 'unknown CWE' message	4 years ago
chrisr3d	63dba29c52	fix: Fixed module names with - to avoid errors with python paths	4 years ago

1 2 3 4 5 ...

453 Commits (1de689015206b1d7a1ad04ae89d1e14b6989ad8f)