MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity
1,508 Commits
6 Branches
44 Tags
12 MiB
Commit Graph

1508 Commits (ec00217098c20cdbb801fed3a785b0e80649cbc1)

Author SHA1 Message Date
Deborah Servili 51f79bceba allow multiple ips in domain|ip object 2017-11-07 09:34:26 +01:00
Alexandre Dulaunoy f46343b2e2
Merge pull request #46 from Delta-Sierra/master 
update ail-leak object
 2017-11-06 16:20:25 +01:00
Deborah Servili d171c73660 update ail-leak object 2017-11-06 14:53:58 +01:00
Alexandre Dulaunoy 9d7d85f1f8
fix: structure fixed + CEF dedication added 2017-11-04 14:24:05 +01:00
Alexandre Dulaunoy 2336a80864
Description clarified 2017-11-04 09:07:12 +01:00
Alexandre Dulaunoy be3e2f425b
Typo fixed 2017-11-04 09:01:59 +01:00
Alexandre Dulaunoy 0c5f58ec63
New objects added 2017-11-04 08:59:26 +01:00
Alexandre Dulaunoy 2a2b48a162
fix: origin of credential as sane_default 2017-11-02 21:37:53 +01:00
Alexandre Dulaunoy dab3ad881a
add: credential object (fix #44) 2017-11-02 20:41:02 +01:00
Alexandre Dulaunoy f8b0e0d320 Merge pull request #43 from Delta-Sierra/master 
add cert eu relationships
 2017-10-27 14:14:56 +02:00
Deborah Servili b19eb276b6 add cert eu relationships 2017-10-27 14:07:46 +02:00
Alexandre Dulaunoy d37a5c480b Merge pull request #42 from Delta-Sierra/master 
add cert-eu relationships
 2017-10-26 16:23:06 +02:00
Deborah Servili 7484b358ec replace space by dash in names 2017-10-26 15:52:36 +02:00
Deborah Servili 9767ca589c add cert-eu relationships 2017-10-26 15:40:53 +02:00
Raphaël Vinot 28dfbb50f7 Remove the executable flag from the json files 2017-10-25 12:16:17 -04:00
truckydev fe594f98ba regex addon 
Add field to specify which type correspond to this regex.
 2017-10-25 10:39:39 +02:00
Raphaël Vinot 3569c70407 Add report object 2017-10-24 13:04:41 -04:00
Raphaël Vinot b317712f4d Merge pull request #40 from CenturyLinkCIRT/master 
Disabled correlation for software name in av-signature
 2017-10-24 10:36:51 -04:00
Thomas Gardner 6e36c162a4 fixed av-signature merge conflicts with upstream 2017-10-24 10:26:24 -04:00
Thomas Gardner 1c4933c1ce disabled AV software correlation and re-ran jq-all-the-things 2017-10-24 10:23:46 -04:00
Alexandre Dulaunoy bbf3e45649
fix: missing description added in asciidoc files 2017-10-23 20:41:08 +02:00
Alexandre Dulaunoy 9410aa99a5
Fix the file object 2017-10-23 20:35:07 +02:00
Alexandre Dulaunoy 0f3261077b
State added to file like signed, harmless... 2017-10-23 20:28:30 +02:00
Raphaël Vinot b801bc6603 jq all the things 2017-10-23 11:51:05 -04:00
Raphaël Vinot d42e4b569b Merge pull request #39 from CenturyLinkCIRT/master 
added av-signature and virustotal-report
 2017-10-23 10:45:29 -04:00
Thomas Gardner f9204db304 added av-signature and virustotal-report 2017-10-23 10:43:12 -04:00
Alexandre Dulaunoy a5d2f71fef Merge pull request #34 from MISP/fix-31-2 
Fix object name
 2017-10-16 15:41:33 +02:00
Alexandre Dulaunoy 9375693f72 Merge pull request #33 from MISP/fix-31-1 
Fix object name.
 2017-10-16 15:41:15 +02:00
Raphaël Vinot 9078fa0e73 Fix object name 
Related to: https://github.com/MISP/misp-objects/issues/31
 2017-10-16 11:41:22 +02:00
Raphaël Vinot 60a375f85d Fix object name. 
Related to: https://github.com/MISP/misp-objects/issues/31
 2017-10-16 11:40:20 +02:00
Alexandre Dulaunoy 0ab002e94c
Fix typo in the field 2017-10-13 15:08:25 +02:00
Alexandre Dulaunoy 9b55a361ec
Some updates including description of fields 2017-10-13 15:02:04 +02:00
Alexandre Dulaunoy 94b9bc9aee
First version of Netflow object based on proposal from @JanKoDFNCERT 
Open questions:

  - What is a minimal Netflow records? I relax a bit the required fields.
  - How does this work with IPFIX (and variable templates)?
  - How should we express the TCP flags expressed? (S/SA/SAF)
 2017-10-13 14:30:10 +02:00
Alexandre Dulaunoy bf8f27d7f5
add: RTIR - Request Tracker for Incident Response added in index 2017-10-12 22:11:09 +02:00
Alexandre Dulaunoy 2b9ba3ac00
add: RTIR object added (as requested by CSP - Cyber Security Core Service Platform) 2017-10-12 22:08:09 +02:00
Alexandre Dulaunoy bc5795dc18
Merge branch 'ater49-patch-4' 2017-10-06 08:23:06 +02:00
Alexandre Dulaunoy deda8abfb1
use url attribute type for link inside a post 2017-10-06 08:22:41 +02:00
Alexandre Dulaunoy c4bc232be2
Merge branch 'patch-4' of https://github.com/ater49/misp-objects into ater49-patch-4 2017-10-06 08:22:00 +02:00
Alexandre Dulaunoy e3974c4e35 Merge pull request #29 from ater49/patch-2 
New attribute: title
 2017-10-04 19:26:17 +02:00
ater49 a13726c138 Update definition.json 
Link attribute added in case of url present into the post.

Multiple set to true for "username-quoted"
 2017-10-04 13:31:25 +02:00
ater49 71860b21e9 New attributes: title 
In case of paste or post has a title.

Ghostbin.com origin added
 2017-10-04 13:24:29 +02:00
Alexandre Dulaunoy 028bb2e0c1
Paste added 2017-09-29 16:18:26 +02:00
Alexandre Dulaunoy bc7c84ca5a
add: Paste or similar post from a website allowing to share privately or publicly posts. 2017-09-29 14:59:39 +02:00
Alexandre Dulaunoy 4b520f0d05
microblog object added 2017-09-29 14:33:54 +02:00
Alexandre Dulaunoy a52847edad Merge pull request #28 from deralexxx/patch-1 
mention uuid
 2017-09-29 11:36:47 +02:00
Alexander J 8a2745fe61 mention uuid 
How to create a uuid and also mention the UUID in the example.

https://twitter.com/alexanderjaeger/status/913505371817435138
 2017-09-29 10:52:04 +02:00
Alexandre Dulaunoy b210163927
Merge branch 'ater49-patch-1' 2017-09-28 22:07:45 +02:00
Alexandre Dulaunoy f10f361df0
jq all and fix the space ;-) 2017-09-28 22:07:15 +02:00
ater49 4c69154ad3 Attributes username-quoted added 
Added Attributes: "username-quoted"
Added types: LinkedIn, Reddit, Google+, Instagram
 2017-09-28 21:36:27 +02:00
Alexandre Dulaunoy 5a80d5c4d2
add: Microblog post object like a Twitter tweet or a post on a Facebook wall. 2017-09-28 19:32:31 +02:00