Christian Studer
64d3a3e5a4
fix: [crowdsec] Typo
2023-05-23 13:34:52 +02:00
Christian Studer
cabf541d67
Merge branch 'main' of github.com:MISP/misp-modules
2023-05-23 13:22:45 +02:00
Christian Studer
6eea5f61d4
fix: [crowdsec] Fixed the `reverse_dns` field parsing & added the `background-noise` attribute
2023-05-23 13:20:52 +02:00
Alexandre Dulaunoy
cd10e88633
Merge pull request #613 from JakubOnderka/update-requirements
...
Update REQUIREMENTS
2023-05-19 20:10:24 +02:00
Jakub Onderka
2f368f3b1e
fixup! Update REQUIREMENTS
2023-05-19 10:22:56 +02:00
Jakub Onderka
edd65e7708
Test against Python 3.11
2023-05-18 19:55:33 +02:00
Jakub Onderka
3309f5321c
Update REQUIREMENTS
2023-05-18 19:55:21 +02:00
Christian Studer
ddd8b8513e
add: [expansion modules] Added `ipinfo` to the expansion modules list in `__init__`
2023-05-16 16:09:04 +02:00
Christian Studer
196939d205
chg: [crowdsec] Updated the module to support the recently added `crowdsec-ip-context` object template
2023-05-12 12:16:22 +02:00
Christian Studer
51cf8524ad
fix: [crowdsec] Fixed the module input handling
...
- Made the module an expansion module as it is the
standard type, and `hover` usually is the option
- Better input handling, checking now for the
`attribute` field as the information of the full
attribute is passed in misp standard format and
not only its type and value
- As for now only `v2` is supported as API version
we removed the parameter to avoid confusion. It
can be added back later when multiple versions
are supported
2023-05-11 16:12:07 +02:00
Christian Studer
88962aba19
Merge branch 'main' of github.com:MISP/misp-modules
2023-05-11 16:11:00 +02:00
Alexandre Dulaunoy
98b766cbdc
fix: [crowdsec] more need to be fully supporting MISP standard format
2023-05-11 15:25:34 +02:00
Alexandre Dulaunoy
337dcf7acb
fix: [crowdsec] version 2
2023-05-11 15:21:31 +02:00
Alexandre Dulaunoy
fe778dd576
fix: [crowdsec] set default version and expansion added
2023-05-11 15:18:26 +02:00
Christian Studer
5b42f9056a
Merge branch 'main' of github.com:MISP/misp-modules
2023-04-28 14:48:01 +02:00
Alexandre Dulaunoy
c1168ac627
fix: [test] pdftotext output check
...
The important part is the matching text from the PDF not any trailling
which might be different depending of the encoding.
2023-04-02 10:47:41 +02:00
Alexandre Dulaunoy
113a112001
fix: [dbl_spamhaus] if you want to run local test, the dns module
...
expansion is taking over from the original dnspython3 library.
The trick is just to get rid of the syspath to exclude the local
directory until the proper library is loaded.
2023-04-02 10:11:24 +02:00
Alexandre Dulaunoy
5aa47e7aeb
Merge pull request #603 from MISP/new_module
...
New module to query ipinfo.io to gather additional information on an IP address
2023-03-29 19:13:54 +02:00
Christian Studer
78b06ea51b
Merge branch 'main' of github.com:MISP/misp-modules
2023-03-27 17:48:30 +02:00
Christian Studer
9892c8db88
Merge branch 'main' of github.com:MISP/misp-modules into new_module
2023-03-27 17:46:42 +02:00
Alexandre Dulaunoy
d275ec5d07
Merge pull request #607 from crowdsecurity/add_crowdsec_doc
...
Add crowdsec json doc
2023-03-21 18:16:48 +01:00
Shivam Sandbhor
f20f9d3043
Add crowdsec json doc
...
Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>
2023-03-21 19:09:14 +05:30
Alexandre Dulaunoy
8b4efbfd59
chg: [mkdocs] config updated
2023-03-20 18:10:59 +01:00
Alexandre Dulaunoy
494c7bbef1
Merge pull request #605 from maikwuerth/main
...
Updated Defender export module
2023-03-12 09:06:11 +01:00
Alexandre Dulaunoy
901c86b0ac
Merge pull request #606 from GreyNoise-Intelligence/greynoise-add-expansion
...
[greynoise] add expansion and refactor
2023-03-10 23:41:34 +01:00
Brad Chiappetta
6a46bd61a2
update message in test_expansions
2023-03-10 13:55:33 -05:00
Brad Chiappetta
b3865b33b7
refactor for sdk and expansion
2023-03-10 12:56:26 -05:00
Maik Würth
ff92b2c5cc
updated moduleInfo
2023-03-10 16:17:56 +01:00
Maik Würth
db5e56c7b2
Added support for SHA256 and MISPObject attributes to Defender export module.
2023-03-10 16:08:49 +01:00
Maik Würth
8cc4774be5
Export object attributes with Defender export module.
2023-03-10 15:48:28 +01:00
Christian Studer
f40f61fc18
add: [documentation] Added documentation for the new ipinfo.io module & updated the main readme file
2023-02-21 15:21:56 +01:00
Christian Studer
69deb8d10b
add: [ipinfo] First version of a new module to query ipinfo.io
...
- First version addressing the request from #600
- Straight forward parsing of the `geolocation`,
`domain-ip` and `asn` information returned by
the standard API endpoint (ipinfo.io/{ip_address})
2023-02-21 13:04:24 +01:00
Christian Studer
81f94d96fd
Merge branch 'main' of github.com:MISP/misp-modules into new_module
2023-02-20 18:59:34 +01:00
Christian Studer
33650819e9
Merge branch 'main' of github.com:MISP/misp-modules
2023-02-20 18:39:13 +01:00
Alexandre Dulaunoy
8579cbb260
chg: [REQUIREMENTS] remove specific version of psutil as mentioned in #593
2023-02-20 10:16:34 +01:00
Alexandre Dulaunoy
f09fe8d243
Merge pull request #602 from crowdsecurity/crowdsec_user_agent
...
Set user agent of crowdsec misp module to crowdsec-misp/v1.0.0
2023-02-20 06:44:18 +01:00
Shivam Sandbhor
2c9b953f23
Set user agent of crowdsec misp module to crowdsec-misp/v1.0.0
...
Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>
2023-02-20 10:11:38 +05:30
Christian Studer
2e7ab05972
Merge branch 'main' of github.com:MISP/misp-modules into new_module
2023-02-09 15:52:57 +01:00
Christian Studer
4cd5f4baf0
Merge branch 'main' of github.com:MISP/misp-modules
2022-11-21 11:46:45 +01:00
Alexandre Dulaunoy
b7bd679b1c
fix: [url_import/url] added in __init__
2022-11-08 06:23:40 +01:00
Christian Studer
cb8f55425c
fix: [crowdsec] Fixed the __init__ files
2022-11-07 23:44:40 +01:00
Christian Studer
b9f97567c5
Merge branch 'main' of github.com:MISP/misp-modules
2022-11-07 23:35:21 +01:00
Sami Mokaddem
9bf7e15053
new: [expansion] Added extract_url_components module to create an object from an URL attribute
2022-11-06 17:28:00 +01:00
Sami Mokaddem
359e3cc21f
Merge branch 'main' of github.com:MISP/misp-modules into main
2022-11-06 17:22:58 +01:00
Sami Mokaddem
4e25a6c126
new: [import] import_blueprint to facilitate an easy-to-use blueprint for data import
2022-11-06 17:21:50 +01:00
Sami Mokaddem
8c053d90b1
new: [import] Url_import module to convert batch of URLs into url objects
2022-11-06 17:21:24 +01:00
Alexandre Dulaunoy
b8de83e9f5
Merge pull request #590 from crowdsecurity/main
...
Add crowdsec module
2022-10-30 22:56:22 +01:00
Shivam Sandbhor
382d8036d9
Add crowdsec module
...
Signed-off-by: Shivam Sandbhor <shivam.sandbhor@gmail.com>
2022-10-28 12:19:35 +05:30
Alexandre Dulaunoy
eaebba2912
chg: [mkdocs] updated doc
2022-10-27 10:15:58 +02:00
Alexandre Dulaunoy
ea071519b2
chg: [mkdows] footer updated
2022-10-27 10:15:25 +02:00