MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity
650 Commits
6 Branches
43 Tags
11 MiB
Commit Graph

650 Commits (b141dce58128419fc414373f6aa3c1d9b425e3ad)

Author SHA1 Message Date
Alexandre Dulaunoy 9a72b53923
chg: allow multiple domains too fix #108 2018-07-20 10:12:09 +02:00
Andras Iklody 5af0d31c49
Allow multiple "pattern-in-file" in file object, fixes #109 2018-07-20 07:03:22 +02:00
Alexandre Dulaunoy 6bfa279701
new: [short-message-service] Short Message Service (SMS) object template describing one or more SMS message added 2018-07-18 09:52:31 +02:00
Alexandre Dulaunoy 319c2a3e96
chg: [threadgrid-report] added in the list of objects 2018-07-17 08:29:14 +02:00
Raphaël Vinot 0244bce6ef new: threatgrid-report object template 2018-07-16 13:48:56 +02:00
Alexandre Dulaunoy 9918cc393d
chg: [coin-address] ETN symbol added 2018-07-13 17:07:35 +02:00
chrisr3d 498c6f114b
fix: Fixed exploits relationship properties 2018-07-10 10:47:31 +02:00
chrisr3d 6585ec3329
add: Updated relationships list with Cybox relationships best practices 2018-07-10 10:40:03 +02:00
Alexandre Dulaunoy b92ab93c80
chg: [relationship] exploits added 2018-07-10 09:41:27 +02:00
Alexandre Dulaunoy 88819d6fa3
chg: [exploit-poc] a same context can contains multiple PoC samples 2018-07-10 09:32:12 +02:00
Alexandre Dulaunoy 26d142d37f
chg: [exploit-poc] added to the list of objects 2018-07-10 07:42:47 +02:00
Alexandre Dulaunoy 021b06bacd
new: exploit-poc object describing a proof of concept or exploit of a vulnerability. This object has often a relationship with a vulnerability object. 2018-07-10 07:41:09 +02:00
Alexandre Dulaunoy 1a491dfd23
chg: [JSON schema] vulnerability added as meta-category 2018-07-10 07:39:58 +02:00
Alexandre Dulaunoy 856cec8d09
chg: [vulnerability] is now in its own vulnerability meta-category 2018-07-10 07:38:28 +02:00
Alexandre Dulaunoy 9eb578d747
chg: [vulnerability] updated following NATO and CIRCL feedback 
- CVSS score added
- CVSS string added
- credit attribute added
- text -> description
- vulnerability attribute can now be any format (not only the CVE
format)
 2018-07-10 07:21:36 +02:00
Alexandre Dulaunoy 2b5592cfa6
fix: [suricata] allow multiple Suricata rules in the object (similar context) and fix the rule to be in Snort format 
Fix #106
 2018-07-09 21:50:44 +02:00
Alexandre Dulaunoy eff3a5f3f5
Merge branch 'master' of github.com:MISP/misp-objects 2018-07-04 11:11:47 +02:00
Alexandre Dulaunoy 6c36a1df69
chg: [coin-address] XMR type address added in addition to the default Bitcoin address format 2018-07-04 11:10:50 +02:00
Alexandre Dulaunoy e9fd65cecb
Merge pull request #105 from chrisr3d/master 
Added some relations used on stix1 files
 2018-06-22 17:37:36 +02:00
chrisr3d 8a916627dd Merge branch 'master' of github.com:MISP/misp-objects 2018-06-22 17:28:12 +02:00
chrisr3d 99b4a20ebb
add: Added some relations seen on stix 2018-06-22 17:27:21 +02:00
Alexandre Dulaunoy 3b21125acd
add: missing timesketch-timeline object template 2018-06-22 07:44:20 +02:00
Alexandre Dulaunoy d9a616095a
Chg: jq all the things 2018-06-19 21:11:24 +02:00
Alexandre Dulaunoy e1eb747426
Merge pull request #104 from ahuan-gdms/master 
adding STIX AIS Information source Object
 2018-06-19 08:32:02 +02:00
AH 7d1e3747d0 STIX AIS Information source 2018-06-18 19:24:31 -04:00
Alexandre Dulaunoy ce8472b92e
Merge pull request #103 from Terrtia/master 
modify ail-leak object for the tagging system
 2018-06-12 15:04:18 +02:00
Thirion Aurélien d2c9ae007a
modify ail-leak object for the tagging system 2018-06-12 11:47:44 +02:00
Alexandre Dulaunoy b6f12a9f46
chg: new script template object 
Object describing a computer program written to be run in a special run-time environment. The script or shell
script can be used for malicious activities but also as support tools for threat analysts.

Fix #101
 2018-06-09 11:36:58 +02:00
Alexandre Dulaunoy 1ca25a39ad
fix: missing ui-priority 2018-06-09 10:59:01 +02:00
Alexandre Dulaunoy 07f41b0444
chg: EPSG and spacial-reference add fix #102 
Following feedback during the last ENISA Cyber Europe 2018, we updated
the geolocation object to the following:

 - Fixing ui-priority to ensure lat,long in order
 - Adding the ability to specify an EPSG value instead of coordinates
 (handy if you want to quickly express a known location/area)
 - Set a default spacial-reference to avoid confusion between reported
 value from GPS versus values projected into a specific spacial
 projection. default is WGS-84.
 2018-06-09 10:46:12 +02:00
Alexandre Dulaunoy a5c331038e
chg: shortened-link template added 2018-06-05 15:22:17 +02:00
Alexandre Dulaunoy b49c6d856b
Merge pull request #100 from cocaman/master 
New misp-object for a shortened URL and the redirect URL
 2018-06-05 15:18:06 +02:00
Corsin Camichel 85901f995a
renamed url attributed, versioning date based 2018-06-05 14:39:12 +02:00
Corsin Camichel 69ed89cef0
updated definition, removed some attributes 2018-06-05 14:35:42 +02:00
Corsin Camichel 19f7c90d1a
Shortened link and its redirect target 2018-06-05 11:04:15 +02:00
Alexandre Dulaunoy d17d11df1a
chg: username of the author added + disable correlation for origin 2018-06-04 19:46:58 +02:00
Alexandre Dulaunoy fe3a91b8d9
chg: change version of the SS7 template object 2018-05-29 16:07:50 +02:00
chrisr3d 00bf1999fc Merge branch 'master' of github.com:MISP/misp-objects 2018-05-25 09:13:44 +02:00
chrisr3d e754719c00
Attribute typo 2018-05-25 09:13:14 +02:00
Alexandre Dulaunoy fb3333f629
add: Timecode object to describe a start of video sequence (e.g. CCTV evidence) and the end of the video sequence. 2018-05-21 10:20:49 +02:00
Alexandre Dulaunoy 52e1316717
chg: Timecode object to describe a start of video sequence (e.g. CCTV evidence) and the end of the video sequence. 2018-05-21 10:19:54 +02:00
chrisr3d b5f352e8c2
add: Added protocol attribute in the network socket object 2018-05-08 09:26:24 +02:00
chrisr3d 536f647135
add: Added hostname (src & dst) attributes 2018-05-08 09:03:57 +02:00
Alexandre Dulaunoy d66b35739d
Merge branch 'master' of github.com:MISP/misp-objects 2018-05-08 08:23:21 +02:00
Alexandre Dulaunoy 4d47c41f5e
Network socket connection template object added 2018-05-08 07:53:58 +02:00
chrisr3d 8e831d6828
Fixed link 2018-05-07 09:11:31 +02:00
Alexandre Dulaunoy 443cce07bc
Missing objects added 2018-05-05 12:39:22 +02:00
Alexandre Dulaunoy c1329bc313
Merge pull request #98 from yodresh/patch-2 
Update definition.json
 2018-05-05 12:18:38 +02:00
Alexandre De Oliveira 13ec601820
Update definition.json 
To avoid having multiple object for each similar attacks coming from the same source, we allow multiple attack source in the same attack.
 2018-05-04 19:09:54 +02:00
chrisr3d 6faf42cbd2
First version of process object 
- Potentially more attributes to come
 2018-05-04 16:34:35 +02:00