MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity
1,356 Commits
7 Branches
55 Tags
19 MiB
Commit Graph

1356 Commits (e880191b10fcc273b056a2a6d8aaaedb48ee25fb)

Author SHA1 Message Date
Raphaël Vinot e880191b10 chg: Bump dependencies 2019-12-08 19:39:44 +01:00
Raphaël Vinot b70c32af7b fix: Somewhat broken emails needed some love 2019-12-05 19:11:07 +01:00
Raphaël Vinot 6fcd9c9b8d fix: MIssing parameter in skip 2019-12-04 17:46:09 +01:00
Raphaël Vinot 5b1ac3dc51 fix: missing pushd 2019-12-04 17:34:34 +01:00
Raphaël Vinot 5d415bb8f2 fix: Missing sudo 2019-12-04 17:24:24 +01:00
Raphaël Vinot 1e1b18fe12 chg: Install faup in travis 2019-12-04 17:15:22 +01:00
Raphaël Vinot 7048f01633 chg: deactive emails tests, need update 2019-12-04 17:03:16 +01:00
Raphaël Vinot 6f95445143 chg: Update email import module, support objects 2019-12-04 15:25:01 +01:00
Raphaël Vinot 2b8a2d03cd chg: Bump dependencies 2019-12-04 15:24:16 +01:00
Alexandre Dulaunoy aa39567587
Merge pull request #356 from ostefano/lastline 
add: Modules to query/import/submit data from/to Lastline
 2019-12-03 06:47:26 +01:00
Stefano Ortolani f749578525 add: Modules to query/import/submit data from/to Lastline 2019-12-02 19:09:40 +00:00
Raphaël Vinot 9744c1e0a5 Revert "Merge pull request #341 from StefanKelm/master" 
This reverts commit 1df0d9152e, reversing
changes made to 6042619c6b.

This PR was a fixing a typo in a test case. The typo is in a 3rd party
service.
 2019-11-26 17:49:01 +01:00
Raphaël Vinot 1df0d9152e
Merge pull request #341 from StefanKelm/master 
Update test_expansions.py
 2019-11-26 17:21:33 +01:00
Raphaël Vinot 6042619c6b Merge branch 'aaronkaplan-master' 2019-11-26 13:28:24 +01:00
Raphaël Vinot 7a7b3a0ae1 chg: Bump dependencies 2019-11-26 13:27:19 +01:00
Raphaël Vinot 5d7a829583 chg: Use MISPObject in ransomcoindb 2019-11-26 13:27:02 +01:00
aaronkaplan 06025e63d0
oops , use relative import 2019-11-26 01:52:31 +01:00
aaronkaplan d73a9b601a
use a helpful user-agent string 2019-11-26 01:08:28 +01:00
aaronkaplan 6546905537
final url fix 2019-11-25 22:25:33 +01:00
aaronkaplan 777483838b
Revert "fix url" 
This reverts commit 44130e2bf9.
 2019-11-25 22:24:57 +01:00
aaronkaplan b82716f888
Revert "fix url again" 
This reverts commit c5924aee25.
 2019-11-25 22:24:14 +01:00
aaronkaplan c5924aee25
fix url again 2019-11-25 21:14:45 +01:00
aaronkaplan 44130e2bf9
fix url 2019-11-25 20:51:20 +01:00
aaronkaplan 132249a521
mention the ransomcoindb in the README file as a new module 2019-11-25 19:03:13 +01:00
aaronkaplan 24ec4a0e23
remove pprint 2019-11-25 18:56:12 +01:00
aaronkaplan 5350003e3a
initial version of the ransomcoindb expansion module 2019-11-25 18:52:39 +01:00
Alexandre Dulaunoy 90ba6db164
Merge pull request #352 from aaronkaplan/patch-1 
Update README.md
 2019-11-22 22:13:48 +01:00
AaronK e4830cb714
Update README.md 
fixes #351
 2019-11-22 21:44:12 +01:00
chrisr3d ccf12a225c
fix: Making pep8 happy 2019-11-21 17:50:49 -05:00
chrisr3d bf1ba161af
add: Added documentation for the AssemblyLine query module 2019-11-21 15:47:06 -05:00
chrisr3d 96712da5e0
add: Module to query AssemblyLine and parse the results 
- Takes an AssemblyLine submission link to query
  the API and get the full submission report
- Parses the potentially malicious files and the
  IPs, domains or URLs they are connecting to
- Possible improvement of the parsing filters in
  order to include more data in the MISP event
 2019-11-21 13:25:50 -05:00
chrisr3d 6dcba6c8ae
fix: Fixed AssemblyLine input description 2019-11-20 17:37:37 -05:00
chrisr3d de8737d2f3
fix: Fixed input types list since domain should not be submitted to AssemblyLine 2019-11-20 17:35:37 -05:00
chrisr3d dc9ea98d2c
fix: Making pep8 happy 2019-11-20 10:13:51 -05:00
chrisr3d 4e98c3efd0
fix: Added missing AssemblyLine logo 2019-11-20 09:52:35 -05:00
chrisr3d ef6542c629
add: Added documentation and description in readme for the AssemblyLine submit module 2019-11-20 09:48:27 -05:00
chrisr3d fb129106ab
add: Updated python dependencies to include the assemblyline_client library 2019-11-19 16:05:16 -05:00
chrisr3d 58a4cb15a1
add: New expansion module to submit samples and urls to AssemblyLine 2019-11-19 15:41:35 -05:00
chrisr3d f08fc6d9a5
chg: Reintroducing the limit to reduce the number of recursive calls to the API when querying for a domain 2019-11-17 19:11:26 -05:00
chrisr3d 4990bcebd8
fix: Avoiding KeyError exception when no result is found 2019-11-17 18:00:19 -05:00
chrisr3d 91d6f1baa0
fix: Fixed csv file parsing 2019-11-07 11:50:16 +01:00
chrisr3d 474307ac5b
chg: Using EQL module description from blaverick62 2019-11-07 09:57:18 +01:00
chrisr3d 204f59de13
add: Updated documentation with the EQL export module 2019-11-07 09:54:32 +01:00
chrisr3d 4608bcab45
Merge branch 'master' of github.com:blaverick62/misp-modules 2019-11-07 09:51:17 +01:00
chrisr3d 9068725322
add: Xforce Exchange module tests 2019-11-05 17:13:34 +01:00
chrisr3d 0fd3f92fe3
fix: Fixed Xforce Exchange authentication + rework 
- Now able to return MISP objects
- Support of the xforce exchange authentication
  with apikey & apipassword
 2019-11-05 16:43:03 +01:00
chrisr3d 852018bf79
fix: Added urlscan & secuirtytrails modules in __init__ list 2019-11-04 16:52:26 +01:00
chrisr3d 2b592ce267
fix: Avoiding empty config error on passivetotal module 2019-11-01 16:59:58 +01:00
Christian Studer 8135a3ceec
Merge pull request #347 from MISP/tests 
More advanced expansion tests
 2019-10-31 18:33:20 +01:00
Braden Laverick 26ab7f69e2 Added documentation json for new modules 2019-10-31 17:28:07 +00:00