Commit Graph

405 Commits (206da3b10087516c37a895a48d3c2ac1ad25dc09)

Author SHA1 Message Date
Raphaël Vinot 206da3b100 new: Attach logfile to fail2ban 2018-03-27 10:25:54 +02:00
Raphaël Vinot 4708caffb5 Merge branch 'master' of github.com:MISP/misp-objects 2018-03-26 17:28:03 +02:00
Raphaël Vinot 3d0540a671 chg: disable correlations in fail2ban 2018-03-26 17:27:55 +02:00
Alexandre Dulaunoy 0a0778bb86
add: new yara object added with a version number 2018-03-26 14:26:15 +02:00
Raphaël Vinot 7c2e07a50b fix: wrong attribute name 2018-03-26 12:05:17 +02:00
Raphaël Vinot d51c3712b9 Merge branch 'master' of github.com:MISP/misp-objects 2018-03-26 11:41:12 +02:00
Raphaël Vinot 1f8fd57d69 chg: Fix&update fail2ban def 2018-03-26 11:41:00 +02:00
Alexandre Dulaunoy b0755e3ca8
jq all 2018-03-26 11:37:38 +02:00
Alexandre Dulaunoy aa30a49796
fix: attribute type fixed 2018-03-26 11:28:32 +02:00
Raphaël Vinot 61fd6728d9 Merge branch 'master' of github.com:MISP/misp-objects 2018-03-26 10:54:52 +02:00
Raphaël Vinot 1f8a26fa3e new: Fail2ban object 2018-03-26 10:54:44 +02:00
Alexandre Dulaunoy c92ee2e461
fix: version field added if stix2-pattern has multiple version in the future 2018-03-19 17:33:45 +01:00
Alexandre Dulaunoy e7e3878042
fix: whois record object updated to cover both cases: domain or IP address 2018-03-16 13:29:39 +01:00
Alexandre Dulaunoy 982e2d8b75
fix: raw whois is also accepted as single attribute in whois object
Required for importing STIX CybOX 1.1 object where just a raw whois
entry is added in remarks.
2018-03-16 13:13:35 +01:00
Alexandre Dulaunoy cee578dce1
add: Connected_To (old STIX 1.1 relationship) 2018-03-16 11:35:15 +01:00
Alexandre Dulaunoy f7f0a88838
fix: some parts of the URL can be repeated such as resource path, anchor...
multiple flag added to the potential part to be repeated.

following a discussion in Gitter with @makflwana
2018-03-15 09:38:53 +01:00
Alexandre Dulaunoy 4ed961f5e6
fix: disable correlation for compression algorithms 2018-03-01 21:09:04 +01:00
Alexandre Dulaunoy a93a285132
fix: Cowrie object - SSH attributes added 2018-03-01 21:08:16 +01:00
Alexandre Dulaunoy 5ef6ee2599
Merge pull request #85 from mokaddem/master
typo: passsword -> password
2018-03-01 16:32:27 +01:00
Sami Mokaddem 73aa339ddd typo: passsword -> password 2018-03-01 16:20:58 +01:00
Alexandre Dulaunoy 1fe3e79a05
fix: add missing destination and source port 2018-02-28 17:47:02 +01:00
Alexandre Dulaunoy 2f433a5e5c
add: Cowrie object template added 2018-02-28 17:42:56 +01:00
Alexandre Dulaunoy bdaee9e1c7
add: Cowrie honeypot object template 2018-02-28 17:41:29 +01:00
Alexandre Dulaunoy 26a516bc7d
Merge branch 'zoomequipd-patch-1' 2018-02-23 08:26:52 +01:00
Alexandre Dulaunoy 73a2b41103
fix: jq all the things 2018-02-23 08:25:35 +01:00
zoomequipd 0d31f27efc
correct rbn --> rtn 2018-02-22 16:37:12 -06:00
zoomequipd 8b1aff8135
add aba-rtn to bank-account object 2018-02-22 16:36:19 -06:00
Alexandre Dulaunoy 06f7a0c75a
Merge pull request #82 from chrisr3d/master
Fixed somme bank-account fields
2018-02-22 11:24:13 +01:00
chrisr3d 271c789f97
fix: Fixed somme bank-account fields 2018-02-22 01:18:15 +01:00
Alexandre Dulaunoy aca27204f5
Merge pull request #81 from chrisr3d/master
Fixed the bank-account meta-category
2018-02-21 20:35:01 +01:00
chrisr3d 4cccea8828
Fixed the bank-account meta-category
... which is actually "financial"
2018-02-20 15:44:02 +01:00
Alexandre Dulaunoy 1c205ef945
Merge pull request #80 from chrisr3d/transaction_test
Attributes describing "t_to" and "t_from" fields of a transaction
2018-02-14 16:27:46 +01:00
chrisr3d 71fa0f66fa
Added default values of funds code 2018-02-14 14:11:42 +01:00
chrisr3d 4d89b15915 Merge branch 'master' of github.com:MISP/misp-objects into transaction_test 2018-02-14 11:42:28 +01:00
Alexandre Dulaunoy b2910f0d7e
Merge pull request #79 from chrisr3d/master
Added optional attributes for a transaction
2018-02-14 11:40:33 +01:00
chrisr3d 0367068f92
Added attributes to describe some origin and target fields of a transaction 2018-02-14 11:33:37 +01:00
chrisr3d 594bf5dcc0
Added attributes for the teller and the authorizer of a transaction 2018-02-13 17:53:37 +01:00
Andras Iklody eef4aab989
Changed http request object template
require either uri or url, http method is no longer required.
2018-02-09 09:43:39 +01:00
Alexandre Dulaunoy 061c0ae222
add: Common Alerting Protocol Version (CAP) object templates 2018-02-09 07:38:41 +01:00
Alexandre Dulaunoy 3d2091b33c
fix: use new attribute type mime-type instead of text 2018-02-09 07:34:58 +01:00
Alexandre Dulaunoy 1c8a5031f7
Merge branch 'master' of github.com:MISP/misp-objects 2018-02-08 11:55:19 +01:00
Alexandre Dulaunoy b4d433a845
add: Common Alerting Protocol Version (CAP) resource object 2018-02-08 11:53:05 +01:00
Alexandre Dulaunoy 64f9c60ae6
Merge pull request #78 from chrisr3d/master
Transaction Object definition and readme file updated
2018-02-08 08:06:35 +01:00
Alexandre Dulaunoy 857065e0e8
Merge branch 'master' of github.com:MISP/misp-objects 2018-02-08 08:05:53 +01:00
Alexandre Dulaunoy 49f78f067d
add: Common Alerting Protocol Version (CAP) info object 2018-02-08 07:45:41 +01:00
chrisr3d 9ad2b50895
Updated description and readme 2018-02-07 17:26:09 +01:00
Alexandre Dulaunoy 4f80aee4d3
Merge pull request #76 from chrisr3d/master
Transaction object, first version
2018-02-07 16:26:01 +01:00
chrisr3d 416c91fd5d Merge branch 'master' of github.com:MISP/misp-objects 2018-02-07 15:43:40 +01:00
chrisr3d ad8e01d4c5
Transaction object 2018-02-07 15:36:37 +01:00
Alexandre Dulaunoy 3161533692
fix: trailing dot removed 2018-02-07 14:54:15 +01:00