Commit Graph

1892 Commits (3d07f2ddc6ed9cf87286bdf5f5253939bf0eba4a)

Author SHA1 Message Date
Christian Studer 980ab615ec
add: [pe-optional-header] New object template for PE optional headers 2024-04-03 17:32:47 +02:00
Christian Studer f247f04548
Merge branch 'main' of github.com:MISP/misp-objects 2024-04-03 14:38:38 +02:00
Christian Studer fba223520a
fix: [pe] Sizes in the PE format should be in bytes 2024-04-03 14:37:55 +02:00
Alexandre Dulaunoy d905c08031
fix: [pe] typo fixed 2024-04-03 14:29:36 +02:00
Christian Studer 7a395b02ea
Merge branch 'main' of github.com:MISP/misp-objects 2024-04-03 14:08:41 +02:00
Christian Studer 2afdb6104b
fix: [pe] `counter` makes more sense here 2024-04-03 14:08:17 +02:00
Alexandre Dulaunoy b45d872424
chg: [schema] add the new 'integer' attribute type in the JSON schema 2024-04-03 13:55:19 +02:00
Christian Studer e042ac127a
chg: [pe] Using the new `integer` attribute type 2024-04-03 13:31:32 +02:00
Christian Studer eb1536f505
chg: [pe] Added `characteristics` & `machine-type` enumerations
- Characteristics are usually in a list, so we
  have now both the list of characteristics with
  their name, and the hex value of the addition
  of all the characteristics numeric values
- We represent the machine type with its name
2024-04-03 11:19:16 +02:00
Christian Studer ad952beb60
add: [pe] Added some PE fields as available with `lief` API 2024-04-02 21:21:38 +02:00
Christian Studer 1118a0492b
Merge branch 'main' of github.com:MISP/misp-objects 2024-04-02 21:18:22 +02:00
Alexandre Dulaunoy b023d0a3de
chg: [ddos] object type alone authorized if the source/target cannot be
disclosed
2024-03-29 16:22:07 +01:00
Alexandre Dulaunoy 8ccd583d21
Merge pull request #421 from sebdraven/main
Add software impacted by exploit
2024-03-18 15:27:18 +01:00
Sebastien Larinier d6af105b45 Add software impacted by exploit 2024-03-18 14:19:35 +00:00
Alexandre Dulaunoy e466c78f79
Merge branch 'sebdraven-main' 2024-03-16 09:49:12 +01:00
Alexandre Dulaunoy ab963cdb5b
chg: [command-line] added sane_default 2024-03-16 09:48:29 +01:00
Alexandre Dulaunoy 322e451c3c
Merge branch 'main' of https://github.com/sebdraven/misp-objects into sebdraven-main 2024-03-16 09:46:59 +01:00
Alexandre Dulaunoy 8aef00517a
Merge pull request #420 from goodlandsecurity/stairwell
adding stairwell object
2024-03-15 20:17:11 +01:00
goodlandsecurity fac453a247
fixed parse error 2024-03-15 14:04:07 -05:00
goodlandsecurity 11bf472d8e
forgot multiple flag on two attributes 2024-03-15 13:52:09 -05:00
goodlandsecurity c3f17d6060
adding stairwell object 2024-03-15 12:05:03 -05:00
Alexandre Dulaunoy 4bf694a846
Merge pull request #419 from sebdraven/crowdsec
change type of ans name
2024-03-07 14:29:45 +01:00
Sebastien Larinier acfef2f5e8 change type of ans name 2024-03-07 12:02:23 +00:00
Sebastien Larinier 53572fe294 fix typo of description 2024-03-07 10:12:21 +00:00
Sebastien Larinier 9c03f6ab9d add software for cmd line and change type 2024-03-07 10:10:36 +00:00
Alexandre Dulaunoy c72ec74070
fix: [cs-beacon-config] Partial info from CS beacon are possible
Fix #417 - Thanks to @sebdraven
2024-03-06 07:24:37 +01:00
Alexandre Dulaunoy 1c1e395f38
Merge pull request #416 from arvchristos/intelmq_disable_correlation
Disable correlation for IntelMQ time fields
2024-03-06 06:27:11 +01:00
Christos Arvanitis a367c43eb9 Disable correlation for IntelMQ time fields 2024-03-05 11:22:17 +01:00
Alexandre Dulaunoy 173af552aa
chg: [person/organization] `impersonated` added to the role of person
and organization templates

Thanks to NRC Cyber Security for the idea.
2024-03-05 08:59:45 +01:00
Alexandre Dulaunoy 3d12addd56
fix: [relationships] updated 2024-02-16 16:10:04 +01:00
Alexandre Dulaunoy 266faf7544
Merge pull request #415 from Delta-Sierra/master
add relationships defs (acquisition and alliance)
2024-02-16 16:09:25 +01:00
Delta-Sierra c978e829c5 fix opposite 2024-02-16 16:05:28 +01:00
Delta-Sierra 1ab371fa27 Merge https://github.com/MISP/misp-objects 2024-02-16 15:41:27 +01:00
Delta-Sierra 51e131dbc7 add relationships defs (acquisition and alliance) 2024-02-16 15:33:40 +01:00
Christian Studer 3ac509965f
add: [process] Environment variables attribute 2024-01-30 15:19:54 +01:00
Christian Studer 7c565093df
chg: [artifact] Changed the `payload_bin` attribute to attachment type 2024-01-19 23:15:41 +01:00
Christian Studer d13c47ed99
Merge branch 'main' of github.com:MISP/misp-objects 2024-01-19 20:32:13 +01:00
Alexandre Dulaunoy b99e7c86a3
Merge pull request #413 from DavidCruciani/main
Add case-uuid to flowintel-task object
2024-01-15 14:47:33 +01:00
David Cruciani 401c34f6f3
chg: [flowintel-task] add case-uuid 2024-01-15 09:11:00 +01:00
Alexandre Dulaunoy 6f96e88534
Merge pull request #412 from DavidCruciani/main
New version for flowintel-cm objects
2024-01-10 13:25:00 +01:00
David Cruciani 248e7a95dc
chg: [validation] jq all 2024-01-10 12:07:32 +01:00
David Cruciani b16fd4f1dd
Merge branch 'main' of https://github.com/DavidCruciani/misp-objects 2024-01-10 11:52:17 +01:00
David Cruciani 55917fe94c
chg: [version] v2 2024-01-10 11:52:10 +01:00
David Cruciani 926da216a0
Merge branch 'MISP:main' into main 2024-01-10 11:50:44 +01:00
David Cruciani b407a9d046
chg: [url] to_ids 2024-01-10 11:49:54 +01:00
Alexandre Dulaunoy 888e0dceda
chg: [doc] updated 2023-12-31 08:49:01 +01:00
Alexandre Dulaunoy 9c8b950425
Merge pull request #411 from DavidCruciani/main
new: [object] flowintel-cm
2023-12-14 16:18:31 +01:00
David Cruciani 156fa7a07e
chg: [flowintel] typo + uuid+origin-url 2023-12-14 16:14:44 +01:00
David Cruciani b657128758
new: [object] flowintel-cm 2023-12-14 15:58:46 +01:00
Alexandre Dulaunoy 587b298e1e
chg: [shadowserver-malware-url-report] resource path added to improve
correlation aspects
2023-12-08 15:18:32 +01:00