MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity
2,001 Commits
6 Branches
54 Tags
18 MiB
Commit Graph

2001 Commits (85bd1b69ad791ada6ebaed73fe7462e0ff5c0be3)

Author SHA1 Message Date
chrisr3d 48635d8f1b
add: Added documentation for the socialscan new module 
- Also quick fix of the message for an invalid
  result or response concerning the queried email
  address or username
 2020-10-02 17:01:02 +02:00
chrisr3d 95f5df7a91 Merge branch 'main' of github.com:MISP/misp-modules into new_module 2020-10-02 16:46:27 +02:00
chrisr3d 0072e04627
chg: Updated expansion modules documentation 
- Added documentation for the missing modules
- Renamed some of the documentation files to match
  with the module names and avoid issues within
  the documentation file (README.md) with the link
  of the miss-spelled module names
 2020-10-02 16:41:47 +02:00
chrisr3d d950b4d7ec
fix: Removed debugging print command 2020-10-02 01:50:49 +02:00
chrisr3d 39904b7f6c
chg: Added socialscan library in Pipfile and updated the lock file 2020-10-01 23:27:43 +02:00
chrisr3d 9a766d6010
add: New module using socialscan library to check email addresses and usernames linked to accounts on online platforms 2020-10-01 23:25:39 +02:00
chrisr3d 14aa6e2d1a
fix: [cve_advanced] Avoiding potential MISP object references issues 
- Adding objects as dictionaries in an event may
  cause issues in some cases. It is better to pass
  the MISP object as is, as it is already a valid
  object since the MISPObject class is used
 2020-10-01 22:44:39 +02:00
chrisr3d c5abf89805
fix: [virustotal_public] Resolve key error when user enrich hostname 
- Same as #424
 2020-09-28 12:34:00 +02:00
Christian Studer 38c3502394
Merge pull request #424 from JakubOnderka/vt-subdomains-fix 
fix: [virustotal] Resolve key error when user enrich hostname
 2020-09-28 12:32:42 +02:00
Raphaël Vinot 2dde6e8757
fix: Typo in EMailObject 
Fix #427
 2020-09-09 10:56:01 +02:00
chrisr3d 9f315f1728
chg: Updated the bgpranking expansion module test 2020-09-08 16:24:41 +02:00
chrisr3d 589a0a0321
chg: Updated documentation for the recently updated bgpranking module 2020-09-08 16:15:23 +02:00
chrisr3d 3101e5bc26
chg: Updated the bgpranking expansion module to return MISP objects 
- The module no longer returns freetext, since the
  result returned to the freetext import as text
  only allowed MISP to parse the same AS number as
  the input attribute.
- The new result returned with the updated module
  is an asn object describing more precisely the
  AS number, and its ranking for a given day
 2020-09-08 16:08:57 +02:00
chrisr3d ae1016946b
fix: Making pep8 happy 2020-08-28 17:30:23 +02:00
chrisr3d 1349ef61a5
chg: Turned the Shodan expansion module into a misp_standard format module 
- As expected with the misp_standard modules, the
  input is a full attribute and the module is able
  to return attributes and objects
- There was a lot of data that was parsed as regkey
  attributes by the freetext import, the module now
  parses properly the different field of the result
  of the query returned by Shodan
 2020-08-28 16:55:50 +02:00
Alexandre Dulaunoy dedce3da28
Merge pull request #426 from hildenjohannes/main 
Recorded Future module: Add proxy support and User-Agent header
 2020-08-28 11:06:12 +02:00
johannesh 8087c9a6a1 Add proxy support and User-Agent header 2020-08-24 11:19:15 +02:00
Alexandre Dulaunoy c1815beff2
Merge pull request #425 from elhoim/elhoim-patch-1 
Disable correlation for detection-ratio attribute in virustotal.py
 2020-08-24 10:32:11 +02:00
David André b5d7c9c7a3
Disable correlation for detection-ratio in virustotal.py 2020-08-24 10:11:08 +02:00
Jakub Onderka bd7f7fa1f3 fix: [virustotal] Resolve key error when user enrich hostname 2020-08-17 17:34:21 +02:00
Alexandre Dulaunoy 7021a0d657
Merge pull request #422 from trustar/feat/EN-5047/MISP-manual-update 
Feat/en 5047/misp manual update
 2020-08-11 06:59:33 +02:00
Jesse Hedden 10e432ec55
Merge branch 'main' into feat/EN-5047/MISP-manual-update 2020-08-10 08:08:06 -07:00
Jesse Hedden a3c01fa318 added comments 2020-08-10 07:53:24 -07:00
Jesse Hedden 91417d390b added comments 2020-08-09 20:41:52 -07:00
Jesse Hedden 0b576faa68 added comments 2020-08-09 20:36:47 -07:00
Jesse Hedden 2d464adfd6 added error checking 2020-08-09 20:29:37 -07:00
Alexandre Dulaunoy c321082f5c
Merge pull request #420 from hildenjohannes/main 
Fix typo error introduced in commit: 3b7a5c4dc2541f3b07baee69a7e8b969…
 2020-08-09 10:07:11 +02:00
johannesh 85d319e85e Fix typo error introduced in commit: 3b7a5c4dc2 2020-08-07 10:36:40 +02:00
Jesse Hedden ee21a88127 updating to include metadata and alter type of trustar link generated 2020-08-06 21:59:13 -07:00
Alexandre Dulaunoy b1ec21360c
Merge pull request #417 from trustar/feat/EN-4664/trustar-misp 
Feat/en 4664/trustar misp
 2020-07-30 09:45:32 +02:00
Jesse Hedden 0b869750d7 added description to readme 2020-07-29 09:35:08 -07:00
Jesse Hedden d7acce9e6d Merge branch 'master' of github.com:trustar/misp-modules into feat/EN-4664/trustar-misp 2020-07-29 09:31:03 -07:00
chrisr3d f1dac0c8df
fix: Fixed pep8 2020-07-28 15:23:24 +02:00
chrisr3d 163b4a64b4 Merge branch 'main' of github.com:MISP/misp-modules into main 2020-07-28 15:07:07 +02:00
chrisr3d d2661c7a20
fix: Fixed pep8 + some copy paste issues introduced with the latest commits 2020-07-28 15:06:25 +02:00
Alexandre Dulaunoy 96634bf8bc
Merge pull request #416 from hildenjohannes/main 
Add Recorded Future module documentation
 2020-07-28 14:57:14 +02:00
johannesh 988bf3487d Improve wording 2020-07-28 13:46:43 +02:00
johannesh a316e1877f Add Recorded Future module documentation 2020-07-28 13:33:48 +02:00
chrisr3d 3ab67b23b6
fix: Avoid issues with the attribute value field name 
- The module setup allows 'value1' as attribute
  value field name, but we want to make sure that
  users passing standard misp format with 'value'
  instead, will not have issues, as well as
  keeping the current setup
 2020-07-28 11:56:03 +02:00
chrisr3d 3b7a5c4dc2
add: Specific error message for misp_standard format expansion modules 
- Checking if the input format is respected and
  displaying an error message if it is not
 2020-07-28 11:47:53 +02:00
chrisr3d 6d528628c7
chg: Updated documentation about the greynoise module 2020-07-27 17:26:07 +02:00
chrisr3d f7b60bed29
chg: Updated Greynoise tests following the latest changes on the expansion module 2020-07-27 17:21:52 +02:00
chrisr3d 8180ecbfa8
chg: Making use of the Greynoise v2 API 2020-07-27 17:20:36 +02:00
Alexandre Dulaunoy 4e36bc6b87
Merge pull request #415 from hildenjohannes/main 
Add Recorded Future expansion module
 2020-07-27 09:38:41 +02:00
johannesh c91a61110a Add Recorded Future expansion module 2020-07-23 12:28:56 +02:00
chrisr3d a4e9fe456e Merge branch 'main' of github.com:MISP/misp-modules into main 2020-07-03 10:24:45 +02:00
chrisr3d a755624886 Merge remote-tracking branch 'origin' into main 2020-07-03 10:24:27 +02:00
chrisr3d 8e4c688dce
fix: Fixed list of sigma backends 2020-07-03 10:10:24 +02:00
chrisr3d b5e0995926
fix: Fixed validators dependency issues 
- Possible rollback if we get issues with virustotal
 2020-07-03 09:41:20 +02:00
Alexandre Dulaunoy a518306ac0
Merge pull request #411 from JakubOnderka/vt-subdomains-fix 
fix: [virustotal] Subdomains is optional in VT response
 2020-07-01 16:24:47 +02:00