MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity
728 Commits
6 Branches
44 Tags
11 MiB
Commit Graph

728 Commits (bb7e8f27f817d3b32e28250541700cbc95ef16a7)

Author SHA1 Message Date
Alexandre Dulaunoy bb7e8f27f8
chg: [tools] remove trailing dot if presents 2019-04-21 15:51:57 +02:00
Raphaël Vinot a6ed6df86a Merge branch 'master' of github.com:MISP/misp-objects 2019-04-18 11:15:56 +02:00
Raphaël Vinot 371ffe77fb chg: Allow to create a file object with a non-malicious file. 
Fix #175 #176
 2019-04-18 11:14:22 +02:00
Andras Iklody 92d15c5efe
Merge pull request #177 from haxpak/haxpak/update-device 
Haxpak/update device
 2019-04-16 07:43:01 +02:00
Andras Iklody 1c8d7552a6
Merge pull request #174 from haxpak/haxpak/relationship-executes 
Haxpak/relationship executes
 2019-04-16 07:42:48 +02:00
Andras Iklody ed271a3b7d
Merge pull request #173 from haxpak/master 
added option "Further Analysis Required" to attribute stage of object course-of-action
 2019-04-16 07:42:32 +02:00
haxpak 4066da31e4 changed device type drop down from category to sane_default 2019-04-16 08:31:43 +05:30
haxpak befa47d2c5 [added] relationship 'executes' : Describes a an object that executes another object 2019-04-15 18:04:44 +05:30
haxpak 2d6522887d added relationship "executes" 2019-04-15 18:00:21 +05:30
haxpak 89b8e10fbe added option "Further Analysis Required" to attribute stage 2019-04-15 17:41:39 +05:30
Andras Iklody 3a82eb6b1a
Merge pull request #172 from haxpak/haxpak/#24 
updated device object
 2019-04-15 10:53:00 +02:00
Andras Iklody a8e89e3eaa
Merge branch 'master' into haxpak/#24 2019-04-15 10:52:48 +02:00
Andras Iklody f5555225aa
Merge pull request #170 from haxpak/haxpak-objects 
Haxpak objects
 2019-04-15 10:37:58 +02:00
haxpak 9f4e7737a1 added attribute DNS name to device object 
changed MAC address misp attribute to mac-address
 2019-04-15 10:33:08 +05:30
haxpak 3cef676f34 added OS, version, dns-name attribute to device 
changed misp-attribute of mac-address from text to mac-address
 2019-04-15 10:29:09 +05:30
haxpak 836bd04a75 meta category for organization changed back to misc since schema_objects.json does not recognize organization as a meta category 2019-04-14 11:32:55 +05:30
haxpak 2053c17fa4 corrected typo 2019-04-14 11:27:29 +05:30
haxpak 4f1745a095 added meta category organization 2019-04-14 11:26:12 +05:30
haxpak 8fe63dfccc modified: relationships/definition.json 2019-04-14 11:14:35 +05:30
haxpak b24336499a modified: objects/device/definition.json 
modified:   objects/phishing-kit/definition.json
 2019-04-14 11:04:57 +05:30
haxpak bb9ff86b2f added MAC address to device 
meta category of organization changed to organization
meta category of person object changed to organization
new object phishing-kit
 2019-04-14 10:53:57 +05:30
Alexandre Dulaunoy 81924c519f
chg: [doc] new organization and device object added 2019-04-13 15:04:23 +02:00
Alexandre Dulaunoy e470413f41
chg: [schema] category removed 2019-04-13 14:59:38 +02:00
Alexandre Dulaunoy cb193524c8
Merge pull request #166 from haxpak/haxpak-objects 
Added new objects
 2019-04-13 14:57:06 +02:00
haxpak 9f3fb14ed5 changed organization meta category to misc 2019-04-13 14:57:55 +05:30
haxpak 6917beee5f reverted device to misc category 2019-04-13 14:02:26 +05:30
haxpak 63fff149f0 added requiredOneOf to device definition 2019-04-13 13:49:16 +05:30
haxpak df91c999e6 fixed typos and ran jq_all_things 2019-04-13 13:45:05 +05:30
haxpak 23ab735119 - added : attachment attribute to annotation 
- added : new object type device
 2019-04-13 13:32:56 +05:30
Alexandre Dulaunoy 6cbac470ef
Merge pull request #163 from haxpak/master 
add : relationship "creates"
 2019-04-13 09:28:04 +02:00
haxpak 26987ca80a added : meta_category "organization" #162 2019-04-13 12:11:43 +05:30
haxpak 161f72678a modified : person object "changed UI priority of the attributes" 
modified : report object "added attachment to report"
 2019-04-13 12:05:51 +05:30
haxpak 71419a999a new-object : Organization "Defines an organization" 2019-04-13 11:55:38 +05:30
haxpak bfa883751a add : relationship "creates" 2019-04-13 11:00:45 +05:30
Alexandre Dulaunoy c5532621b6
chg: [ip-port] ip-src added to fix #149 2019-04-07 22:28:36 +02:00
Alexandre Dulaunoy 006aa1d1a2
chg: [script] filename added to fix #149 2019-04-07 22:24:58 +02:00
Alexandre Dulaunoy bfcfe7aae9
chg: [doc] tor-hiddenservices added 2019-04-05 11:24:54 +02:00
Alexandre Dulaunoy b4478a6c2b
add: [tor-hiddenservice] a simple object template to describe Tor Onion Service 2019-04-05 11:22:22 +02:00
Alexandre Dulaunoy aca06cec1f
chg: [lnk] new LNK object (Windows Shortcut) 2019-04-03 14:05:39 +02:00
Alexandre Dulaunoy 4793bf33ae
chg: [process] fix the type - fix #160 2019-04-02 19:56:59 +02:00
Alexandre Dulaunoy ba31488e5a
Merge pull request #161 from geekscrapy/geekscrapy-patch-1 
Username is often utilised alongside a credential
 2019-04-02 19:55:59 +02:00
Alexandre Dulaunoy 302182e594
Merge pull request #159 from geekscrapy/patch-1 
Added current-directory to required field
 2019-04-02 19:55:03 +02:00
Alexandre Dulaunoy 4ae7448b0c
Merge pull request #158 from geekscrapy/patch-2 
Added issuer as one of the required fields
 2019-04-02 19:54:38 +02:00
molley a50986361f
Username is often utilised alongside a credential 
Username can often identify malicious behavior, and is usually part of the credential tuple - it can also be used to highlight common user accounts without password/api key
 2019-04-02 18:26:00 +01:00
molley 490d760a4b
Added current-directory to required field 
This field will often indicate where a malicious binary is started from, therefore a good candidate for solo use
 2019-04-02 17:41:07 +01:00
molley a85178255c
Added issuer as one of the required fields 
This is often a field used on it's own to identify a malicious cert
 2019-04-02 17:28:49 +01:00
Raphaël Vinot 0c6b7b4302 chg: Bump vehicle object 2019-04-02 17:09:02 +02:00
Alexandre Dulaunoy 047595ddeb
chg: [person] Spanish IDs added (NIE, NIF and DNI) 2019-03-15 14:36:12 +01:00
chrisr3d 59f8621fe2
add: New relationship "retrieved-from" 2019-03-12 17:21:52 +01:00
Alexandre Dulaunoy d0886ba6af
Merge pull request #155 from Delta-Sierra/master 
remove accent from ilr objects
 2019-02-27 07:14:02 +01:00