MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity
2,132 Commits
6 Branches
54 Tags
19 MiB
Commit Graph

2132 Commits (8e97bf9938357c2d745216929a2f464aa4b59ece)

Author SHA1 Message Date
Alexandre Dulaunoy 792a548735
Merge pull request #540 from cudeso/main 
Module to push malware samples to a MWDB instance
 2021-12-27 23:46:01 +01:00
Koen Van Impe adc61963df Update REQUIREMENTS 2021-12-27 15:23:13 +01:00
Koen Van Impe b9fb2f3ca7 Update mwdb.py 2021-12-26 23:59:16 +01:00
Koen Van Impe c42723d42d Module to push malware samples to a MWDB instance 
- Upload of attachment or malware sample to MWDB
- Tags of events and/or attributes are added to MWDB.
- Comment of the MISP attribute is added to MWDB.
- A link back to the MISP event is added to MWDB via the MWDB attribute.
- A link to the MWDB attribute is added as an enriched attribute to the MISP event.
 2021-12-26 23:34:00 +01:00
Alexandre Dulaunoy e86201a9fc
Update README 
Add status badge for GH workflow
 2021-12-25 09:09:08 +01:00
Alexandre Dulaunoy 3f127faa50
Merge pull request #539 from JakubOnderka/github-actions 
new: [CI] Use GitHub Actions for test
 2021-12-25 08:10:42 +01:00
Jakub Onderka 84ded524f9 chg: [pip] Force pandas to 1.3.5 2021-12-24 16:54:12 +01:00
Jakub Onderka 907ac1e935 fix: [ods_enrich] Try to fix reading bytesio 2021-12-24 16:48:24 +01:00
Jakub Onderka 2842b27c50 fix: [test] Skip test_ipasn and test_otx tests 2021-12-24 16:48:24 +01:00
Jakub Onderka 3fe7072bfb fix: [ods_enrich] Better exception logging 2021-12-24 16:48:24 +01:00
Jakub Onderka c5801d1776 fix: [test] Better error handling 2021-12-24 16:48:24 +01:00
Jakub Onderka 1f75b8f865 fix: [internal] Better exception logging 2021-12-24 16:48:24 +01:00
Jakub Onderka e50ab6379f fix: [test] Typo 2021-12-24 16:48:24 +01:00
Jakub Onderka ef55d7cc3d new: [CI] Use GitHub Actions for test 2021-12-24 16:48:24 +01:00
Alexandre Dulaunoy 9d8aea439f
Merge branch 'main' of github.com:MISP/misp-modules into main 2021-12-22 11:38:06 +01:00
Alexandre Dulaunoy 767de02107
chg: [gitchangelogrc] added 2021-12-22 11:37:33 +01:00
Alexandre Dulaunoy 268bb312c9
fix: [hashlookup] typo fixed 2021-12-18 17:11:06 +01:00
Alexandre Dulaunoy 2d98885231
chg: [hashlookup] support for sha256 and bug fix for non-exising MD5 2021-12-18 09:22:32 +01:00
Alexandre Dulaunoy eb5190049c
chg: [Pipefile.lock] removed 2021-12-17 14:07:40 +01:00
Alexandre Dulaunoy 2dbaba7053
chg: [REQUIREMENTS] chardet issue - let installer decide 2021-12-17 13:56:20 +01:00
Alexandre Dulaunoy f7b35ee7eb
chg: [REQUIREMENTS] aiohttp 2021-12-17 13:50:50 +01:00
Alexandre Dulaunoy 578187a9f9
chg: [requirements] pillow updated to the latest version 2021-12-17 13:50:11 +01:00
Alexandre Dulaunoy ffe3f0680a
chg: [requirements] lxml updated 2021-12-17 13:49:14 +01:00
Alexandre Dulaunoy eaff5700de
chg: [doc] updated 2021-11-24 11:05:00 +01:00
Alexandre Dulaunoy 06d62d101c
Merge pull request #536 from qintel/feat/qintel_qsentry 
New Module: Qintel QSentry
 2021-11-23 18:47:42 +01:00
Calvin Krzywiec 897164c5ed
feature: add qintel qsentry module documentation 2021-11-22 15:52:58 -05:00
Calvin Krzywiec dc0660acd0
feature: add qintel qsentry expansion module 2021-11-22 15:46:46 -05:00
Steve Clement d4856a0c68
Merge pull request #534 from SteveClement/main 2021-11-09 23:49:21 +09:00
Steve Clement 800135f4e2
fix: [py] Dependency fix 2021-11-09 15:48:34 +01:00
Steve Clement 293c74c3b5
Merge pull request #533 from SteveClement/main 2021-11-09 23:43:58 +09:00
Steve Clement e34b019f29
chg: [py] Dependency bump. Works on buuntu 18.04.x 2021-11-09 15:37:56 +01:00
Steve Clement 887bfffa91
Merge pull request #532 from SteveClement/main 2021-11-09 23:03:52 +09:00
Steve Clement 5bad98cf47
chg: [py] Pandas requirements update 2021-11-09 14:59:57 +01:00
Alexandre Dulaunoy 7cb7a9bd52
chg: [documentation] updated 2021-10-27 22:25:41 +02:00
Alexandre Dulaunoy 04a6e89813
chg: [doc] updated 2021-10-27 22:24:38 +02:00
Alexandre Dulaunoy aa21c8619c
fix: [mkdocs] updated configuration for version 5 of mkdocs 2021-10-27 22:23:50 +02:00
Alexandre Dulaunoy eeb321fae7
new: [doc] Passive SSH documentation 2021-10-27 22:01:46 +02:00
Alexandre Dulaunoy 9c25f4e778
Merge pull request #529 from gallypette/main 
passive-ssh expansion module
 2021-10-26 16:37:39 +02:00
Jean-Louis Huynen 84ecc19206
Merge branch 'MISP:main' into main 2021-10-26 15:12:12 +02:00
Jean-Louis Huynen 7967542be6 add: [passive-ssh] initial commit 2021-10-26 15:11:20 +02:00
Alexandre Dulaunoy 66ac7fefad
Merge pull request #528 from rderkachrf/rf_release_2_0 
Release 2.0: Update Recorded future expansion module with the new data
 2021-10-25 21:14:24 +02:00
rderkach 4fd3323220 Update Recorded future expansion module with the new data 
In this release, we added new data that we have called Links.
It represents better and more filtered related data.
Also did some code formatting.
 2021-10-25 18:01:05 +03:00
Alexandre Dulaunoy e802679f25
Merge pull request #526 from korrosivesec/patch-1 
Add libcaca-dev to apt packages required
 2021-10-21 22:29:54 +02:00
Kory Kyzar 58e4080b4f
Add libcaca-dev to apt packages required 
I needed to add libcaca-dev to make gtcaca.

## Before
```
misp@server:/usr/local/src/gtcaca/build$ cmake .. && make
-- The C compiler identification is GNU 7.5.0
-- The CXX compiler identification is GNU 7.5.0
-- Check for working C compiler: /usr/bin/cc
-- Check for working C compiler: /usr/bin/cc -- works
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Detecting C compile features
-- Detecting C compile features - done
-- Check for working CXX compiler: /usr/bin/c++
-- Check for working CXX compiler: /usr/bin/c++ -- works
-- Detecting CXX compiler ABI info
-- Detecting CXX compiler ABI info - done
-- Detecting CXX compile features
-- Detecting CXX compile features - done
CMake system name: Linux
-- Found PkgConfig: /usr/bin/pkg-config (found version "0.29.1")
pkg config path:
-- Check if the system is big endian
-- Searching 16 bit integer
-- Looking for sys/types.h
-- Looking for sys/types.h - found
-- Looking for stdint.h
-- Looking for stdint.h - found
-- Looking for stddef.h
-- Looking for stddef.h - found
-- Check size of unsigned short
-- Check size of unsigned short - done
-- Using unsigned short
-- Check if the system is big endian - little endian
-- Checking for module 'caca'
--   No package 'caca' found
CMake Error at /usr/share/cmake-3.10/Modules/FindPkgConfig.cmake:415 (message):
  A required package was not found
Call Stack (most recent call first):
  /usr/share/cmake-3.10/Modules/FindPkgConfig.cmake:593 (_pkg_check_modules_internal)
  CMakeLists.txt:69 (pkg_check_modules)


-- Configuring incomplete, errors occurred!
See also "/usr/local/src/gtcaca/build/CMakeFiles/CMakeOutput.log".
```

## After
```
misp@server:/usr/local/src/gtcaca/build$ cmake .. && make
CMake system name: Linux
pkg config path:
-- Checking for module 'caca'
--   Found caca, version 0.99.beta19
libcaca link library: -lcaca
CMake system: Linux
-- Configuring done
-- Generating done
-- Build files have been written to: /usr/local/src/gtcaca/build
```
 2021-10-21 09:14:13 -04:00
chrisr3d be5635b0a4
fix: [yara_query] Fixed module input parsing 
- The module used to work properly when called
  from a single attribute enrichment, but was
  broken when called from the hover enrichment
  feature, because of the additional `persistent`
  field used to define which type of hover
  enrichment is queried
 2021-10-15 17:18:29 +02:00
Alexandre Dulaunoy 4162ccb528
chg: [hashlookup] KnownMalicious field added 2021-09-24 15:35:14 +02:00
Alexandre Dulaunoy b6e0c4ce53
chg: [hashlookup] add new fields such as source, SSDEEP and TLSH 2021-09-24 15:29:23 +02:00
Alexandre Dulaunoy 9783113a1e
fix: [hashlookup] FileName and size are not required fields and can be missing in a hashlookup record 2021-09-24 15:09:07 +02:00
Luciano Righetti e7488791d3 fix: add missing dependency (ndjson) of cof2misp1 2021-09-20 15:17:12 +02:00
Andras Iklody 4115b7607e
fix: added note about the Domaintools module being deprecated 
- as requested by Domaintools, including a link to their own, up to date module
 2021-09-09 13:57:29 +02:00