misp-modules

Commit Graph

Author	SHA1	Message	Date
Georg Schölly	efb0a88eeb	joesandbox_query.py: improve behavior in unexpected circumstances	4 years ago
chrisr3d	aa3e873845	fix: Making pep8 happy + added joe_import module in the init list	4 years ago
chrisr3d	42bc6f8d2b	fix: Fixed variable name typo	4 years ago
chrisr3d	ee48d99845	add: New expansion module to query Joe Sandbox API with a report link	4 years ago
chrisr3d	07698e5c72	fix: Fixed references between domaininfo/ipinfo & their targets - Fixed references when no target id is set - Fixed domaininfo parsing when no ip is defined	4 years ago
chrisr3d	0d40830a7f	fix: Some quick fixes - Fixed strptime matching because months are expressed in abbreviated format - Made data loaded while the parsing function is called, in case it has to be called multiple times at some point	4 years ago
chrisr3d	74b73f9332	chg: Moved JoeParser class to make it reachable from expansion & import modules	4 years ago
chrisr3d	f541b1f4ba	Merge branch 'master' of github.com:MISP/misp-modules into new_module	4 years ago
Alexandre Dulaunoy	a49385a353	Merge pull request #304 from joesecurity/new_module add support for url analyses	4 years ago
Georg Schölly	9377a892f4	support url analyses	4 years ago
Georg Schölly	380b8d46ba	improve forwards-compatibility	4 years ago
Alexandre Dulaunoy	2060d02f18	new: [doc] Joe Sandbox added in the list	4 years ago
Alexandre Dulaunoy	bb10212047	Merge branch 'joesecurity-joesandbox_submit'	4 years ago
Alexandre Dulaunoy	15df4d0706	Merge branch 'joesandbox_submit' of https://github.com/joesecurity/misp-modules into joesecurity-joesandbox_submit	4 years ago
Alexandre Dulaunoy	feeca02625	chg: [install] REQUIREMENTS file updated	4 years ago
Alexandre Dulaunoy	74f1de15e3	chg: [install] Pipfile.lock updated	4 years ago
Alexandre Dulaunoy	2cd11ba497	chg: [requirements] Python API wrapper for the Joe Sandbox API added	4 years ago
chrisr3d	8ac651562e	fix: Making pep8 & travis happy	4 years ago
chrisr3d	be05de62c0	add: Parsing MITRE ATT&CK tactic matrix related to the Joe report	4 years ago
chrisr3d	e608107a09	add: Parsing domains, urls & ips contacted by processes	4 years ago
chrisr3d	cfec9a6b1c	fix: Added references between processes and the files they drop	4 years ago
chrisr3d	191034d311	add: Starting parsing dropped files	4 years ago
Georg Schölly	1745d33ee4	add expansion for joe sandbox	4 years ago
chrisr3d	417c306ace	fix: Avoiding network connection object duplicates	4 years ago
chrisr3d	72e5f0099d	fix: Avoid creating a signer info object when the pe is not signed	4 years ago
chrisr3d	54f5fa6fa9	fix: Avoiding dictionary indexes issues - Using tuples as a dictionary indexes is better than using generators...	4 years ago
chrisr3d	0d5f867825	add: Starting parsing network behavior fields	4 years ago
chrisr3d	f9515c14d0	fix: Avoiding attribute & reference duplicates	4 years ago
chrisr3d	2246fc0d02	add: Parsing registry activities under processes	4 years ago
chrisr3d	067b229224	fix: Handling case of multiple processes in behavior field - Also starting parsing file activities	4 years ago
chrisr3d	d195b554a5	fix: Testing if some fields exist before trying to import them - Testing for pe itself, pe versions and pe signature	4 years ago
chrisr3d	fc8a56d1d9	fix: Removed test print	4 years ago
chrisr3d	df7047dff0	fix: Fixed output format to match with the recent changes on modules	4 years ago
chrisr3d	29e681ef81	add: Parsing processes called by the file analyzed in the joe sandbox report	4 years ago
chrisr3d	d39fb7da18	add: Parsing some object references at the end of the process	4 years ago
chrisr3d	728386d8a0	add: [new_module] Module to import data from Joe sandbox reports - Parsing file, pe and pe-section objects from the report file info field - Deeper file info parsing to come - Other fields parsing to come as well	4 years ago
chrisr3d	b00c576447	Merge branch 'master' of github.com:MISP/misp-modules into new_module	4 years ago
Raphaël Vinot	d66f7932f7	chg: Bump dependencies	4 years ago
chrisr3d	77db21cf18	fix: Making pep8 happy	4 years ago
chrisr3d	f1b5f05bb3	fix: Checking not MISP header fields - Rejecting fields not recognizable by MISP	4 years ago
chrisr3d	6608671a01	Merge branch 'master' of github.com:MISP/misp-modules into new_module	4 years ago
Alexandre Dulaunoy	7713500cd6	Merge pull request #300 from cudeso/master Bugfix for "sources" ; do not include as IDS for "access" registry keys	4 years ago
chrisr3d	28eb92da53	fix: Using pymisp classes & methods to parse the module results	4 years ago
chrisr3d	ae5bd8d06a	fix: Clearer user config messages displayed in the import view	4 years ago
Koen Van Impe	1cd60790fd	Bugfix for "sources" ; do not include as IDS for "access" registry keys - Bugfix to query "operations" in files, mutex, registry - Do not set IDS flag for registry 'access' operations	4 years ago
chrisr3d	d4bc85259d	fix: Removed unused library	4 years ago
chrisr3d	6f4b88606b	fix: Make pep8 happy	4 years ago
chrisr3d	a5ff849950	Merge branch 'master' of github.com:MISP/misp-modules into new_module	4 years ago
Steve Clement	e8ff7c4c38	New VMRay modules (#299 ) New VMRay modules	4 years ago
Steve Clement	559ed786ba	chg: [pep8] try/except # noqa Not sure how to make flake happy on this one.	4 years ago

1 2 3 4 5 ...

1075 Commits (efb0a88eebd34d5320e7d06dbfa334183d776dbe) All Branches Search

1075 Commits (efb0a88eebd34d5320e7d06dbfa334183d776dbe)

All Branches