misp-modules

Commit Graph

Author	SHA1	Message	Date
Georg Schölly	04685ea63e	joe: (1) allow users to disable PE object import (2) set 'to_ids' to False	3 years ago
Stefano Ortolani	66bf650b79	change: migrate to analysis API when submitting tasks to Lastline	3 years ago
chrisr3d	35c438e6ee	fix: typo	3 years ago
chrisr3d	f5452055f6	fix: Fixed vt_graph imports	3 years ago
chrisr3d	70b3079aa3	fix: Fixed pep8 in the new module and related libraries	3 years ago
chrisr3d	7722e2cb93	fix: Fixed typo on function import	3 years ago
Alvaro Garcia	10b4e78704	add vt_graph export module	3 years ago
Stefano Ortolani	f749578525	add: Modules to query/import/submit data from/to Lastline	4 years ago
chrisr3d	0b603fc5d3	fix: Fixed unnecessary dictionary field call - No longer necessary to go under 'Event' field since PyMISP does not contain it since the latest update	4 years ago
chrisr3d	3367e47490	fix: Avoid issues when there is no pe field in a windows file sample analysis - For instance: doc file	4 years ago
chrisr3d	3d41104d5b	fix: Avoid adding file object twice if a KeyError exception comes for some unexpected reasons	4 years ago
chrisr3d	ddeb04bd74	add: Parsing linux samples and their elf data	4 years ago
chrisr3d	41bbbeddfb	fix: Testing if file & registry activities fields exist before trying to parse it	4 years ago
chrisr3d	4c8fe9d8ef	fix: Testing if there is some screenshot data before trying to fetch it	4 years ago
chrisr3d	e2a0f27d75	fix: Fixed direction of the relationship between files, PEs and their sections - The file object includes a PE, and the PE includes sections, not the other way round	4 years ago
chrisr3d	42b95c4210	fix: Fixed variable names	4 years ago
chrisr3d	5602cf1759	add: Parsing apk samples and their permissions	4 years ago
chrisr3d	fc8a573ba7	fix: Changed the way references added at the end are saved - Some references are saved until they are added at the end, to make it easier when needed - Here we changed the way they are saved, from a dictionary with some keys to identify each part to the actual dictionary with the keys the function add_reference needs, so we can directly use this dictionary as is when the references are added to the different objects	4 years ago
chrisr3d	181e6383a3	fix: Added missing add_attribute function	4 years ago
chrisr3d	9a6d484188	add: Added screenshot of the behavior of the analyzed sample	4 years ago
chrisr3d	1ac85a4879	fix: We will display galaxies with tags	4 years ago
chrisr3d	de966eac51	fix: Returning tags & galaxies with results - Tags may exist with the current version of the parser - Galaxies are not yet expected from the parser, nevertheless the principle is we want to return them as well if ever we have some galaxies from parsing a JoeSandbox report. Can be removed if we never galaxies at all	4 years ago
chrisr3d	b52e17fa8d	fix: Removed duplicate finalize_results function call	4 years ago
chrisr3d	07698e5c72	fix: Fixed references between domaininfo/ipinfo & their targets - Fixed references when no target id is set - Fixed domaininfo parsing when no ip is defined	4 years ago
chrisr3d	0d40830a7f	fix: Some quick fixes - Fixed strptime matching because months are expressed in abbreviated format - Made data loaded while the parsing function is called, in case it has to be called multiple times at some point	4 years ago
chrisr3d	74b73f9332	chg: Moved JoeParser class to make it reachable from expansion & import modules	4 years ago

26 Commits (fe1ea90b25773463ed2e6f0e8753a464cf9d148b)