MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity
1,041 Commits
6 Branches
44 Tags
11 MiB
Commit Graph

729 Commits (c6da4c9e66038583aa78b0d799345e7c80f9d77c)

Author SHA1 Message Date
VVX7 c6da4c9e66 chg: [dev] add user avatar 2020-05-28 16:40:21 -04:00
VVX7 69467c133f new: [dev] add facebook-account 2020-05-28 16:32:20 -04:00
VVX7 5aeac12979 chg: [dev] change post-id attribute type to text 2020-05-28 15:48:18 -04:00
VVX7 ede33742aa chg: [dev] run rq 2020-05-28 15:32:43 -04:00
VVX7 ae95dd1834 new: [dev] add facebook-post object. 2020-05-28 15:31:50 -04:00
VVX7 5a9a0fe5ce new: [dev] add facebook-page object. 2020-05-28 15:29:01 -04:00
VVX7 66f96da3d9 new: [dev] add facebook-group object. 2020-05-28 15:25:04 -04:00
VVX7 2164d80337 chg: [dev] update tracking-id to disable correlation on id description. minor changes to attribute descriptions. 2020-05-28 15:19:27 -04:00
Raphaël Vinot 093850f6c3 new: Preliminary version of git-vuln-finder object template 2020-05-26 12:31:45 +02:00
Alexandre Dulaunoy 9e73449ec7
chg: [sms] format fixed 2020-05-14 18:17:09 +02:00
Carlos Borges 546cd88918
Updating template version 2020-05-13 20:44:09 -03:00
Carlos Borges 02ea8d2afc
updating a missing comma 2020-05-13 20:43:37 -03:00
Carlos Borges e5ed919e26
Adding phone company of the sending SMS number 
While sharing some data using this object, we saw the need to add the phone company of the number sending the sms. 
With it we can make good local correlations and have an idea of flaws ocurring on phone number release by these companies.
Using web services like Truecaller, it's possible to enrich an analysis with this data.
 2020-05-13 20:42:55 -03:00
Raphaël Vinot 26a9d6b51f new: Objects and relations for FollowTheMoney 2020-05-05 11:02:53 +02:00
Alexandre Dulaunoy 366a8bb121
chg: [boleto] JSON fixed 2020-05-04 13:19:59 +02:00
Carlos Borges 68fe7eed05
New object - Boleto 
Boleto is a very common form of payment used in Brazil and used a lot by cybercriminals to execute fraud.
Basically a bank or financial instituion is allowed to generate boletos, that is a 40 digit number code. 
This object will help institutions identify frauds sources and improve orgs protection.
 2020-05-03 00:02:40 -03:00
VVX7 bb600ce627 chg: [publication] modify requiredOneOf, contributor type to text attribute 2020-04-28 18:58:59 -04:00
VVX7 738f32e27b new: [publication] jq'd the object 2020-04-28 15:46:13 -04:00
VVX7 84633dbd32 new: [publication] add object to describe academic journals, books, etc. 2020-04-28 11:57:28 -04:00
Raphaël Vinot d9f1db590a chg: Sort all the entries in the templates by default 2020-04-26 02:13:18 +02:00
Raphaël Vinot 73d710cfbc fix: Align directory names with object name 2020-04-26 02:07:26 +02:00
Alexandre Dulaunoy 3b5451c325
chg: [legal-entity] website and logo added for legal entity 
Thanks to Emmanuel MANCIET for the proposal
 2020-04-24 18:24:25 +02:00
VVX7 28b4b615ed chg: [object] add new microblog attributes, change some of the descriptions to make them clearer 2020-04-17 00:11:48 -04:00
VVX7 d50a9eeb13 new: [object] add scheduled-event, add social-media-group 2020-04-15 22:57:12 -04:00
VVX7 fae74bf73c Merge branch 'master' of https://github.com/misp/misp-objects 2020-04-15 22:24:57 -04:00
Alexandre Dulaunoy ef01e6e37b
chg: [victim] add a domain to field to reference a victim by their Internet domain name 2020-04-15 09:39:32 +02:00
VVX7 efa53e812d chg: [object] update narrative required object fields 2020-04-10 01:39:05 -04:00
VVX7 1527dedb26 chg: [object] update narrative object fields 2020-04-08 09:45:49 -04:00
Christophe Vandeplas 87e3824d99
Merge pull request #244 from Golbark/x509_enhancements 
chg: [x509] using built-in types wherever possible
 2020-04-08 10:51:01 +02:00
Golbark 238c44041a chg: [x509] using built-in types wherever possible 2020-04-08 01:42:12 -07:00
VVX7 a7e9fd9697 chg: [object] disable correlation on some fields. add external references. 2020-03-28 19:23:28 -04:00
VVX7 2b3e89b614 chg: [object] add narrative description/summary 2020-03-28 19:17:25 -04:00
VVX7 0518dd1aa3 chg: [object] add narrative description/summary 2020-03-28 19:16:33 -04:00
VVX7 1198f8fe68 chg: [object] change narrative version 2020-03-27 15:46:31 -04:00
VVX7 e387009bdd new: [object] add narrative. 2020-03-27 15:10:22 -04:00
Raphaël Vinot b436f9f28b Merge branch 'master' of github.com:MISP/misp-objects 2020-03-24 13:24:40 +01:00
Raphaël Vinot 9eedb854de chg: Bump CSSE COVID-19 Daily report to new version 2020-03-24 13:24:31 +01:00
chrisr3d fdfe7d2e4c
add: External references attribute for attack-pattern object 2020-03-17 10:03:33 +01:00
Alexandre Dulaunoy 7ef9a2ba56
Merge pull request #240 from cudeso/master 
Objects for data coming from the Cytomic Orion API
 2020-03-10 09:40:50 +01:00
Koen Van Impe 2c58470654 JQ-all-the-things 2020-03-09 23:29:29 +01:00
Koen Van Impe ecac7ea52a Update object definition with first-|last- seen 2020-03-09 23:26:25 +01:00
Alexandre Dulaunoy a09f7f55a8
chg: [victim] add reference to case (as requested by law-enforcement - ENFORCE project) 2020-03-09 16:32:18 +01:00
Alexandre Dulaunoy 65a51a586f
chg: [http-request] fixed 2020-03-09 16:25:57 +01:00
Alexandre Dulaunoy 401b8a4619
Merge pull request #239 from cbboggs/cbboggs-http-request 
Adding optional ip-src to http-request
 2020-03-09 16:25:14 +01:00
Koen Van Impe bffae90c3d Remove -x from JSON files 2020-03-07 09:28:43 +01:00
Koen Van Impe bbac01aa1b Fix with jq_all_the_things 2020-03-07 09:24:51 +01:00
Koen Van Impe 8bb88fceaf Objects for data coming from the Cytomic Orion API 2020-03-07 09:03:01 +01:00
frpet 5fdec81530 Update definition.json 
bump version
 2020-03-06 14:08:20 +01:00
cbboggs fa6fe463a9
Adding optional ip-src to http-request 
modified existing "ip" attribute to "ip-dst", and added attribute for ip-src.   This allows http-request to be used in scenarios where observed connections are source specific, not destination specific.
 2020-03-05 12:24:14 -06:00
frpet 2c6c44ccf8 Use more explicit misp-attribute types 
Use the apropriate misp-attribute type for *local_hostname, *fqdn, *.md5|*.sha*
 2020-03-05 18:55:29 +01:00