mirror of https://github.com/MISP/misp-training
add: Added slides for the new modules format
parent
2c8bc75a21
commit
0a1bb2ba19
|
@ -413,14 +413,13 @@
|
|||
\item Similar to expansion modules
|
||||
\item Input is a file upload or a text paste
|
||||
\item Output is a list of parsed attributes to be editend and verified by the user
|
||||
\item System is still new but some modules already exist
|
||||
\item Some examples
|
||||
\begin{itemize}
|
||||
\item Cuckoo JSON import
|
||||
\item email import
|
||||
\item OCR module
|
||||
\item Simple STIX import module
|
||||
\item Open IoC import
|
||||
\end{itemize}
|
||||
\item Many ideas for future modules (OpenIOC import, connector to sandboxes, STIX 2.0, etc)
|
||||
\end{itemize}
|
||||
\end{frame}
|
||||
|
||||
|
@ -624,6 +623,33 @@
|
|||
\end{adjustbox}
|
||||
\end{frame}
|
||||
|
||||
\begin{frame}[fragile]
|
||||
\frametitle{New expansion \& import modules format}
|
||||
\begin{itemize}
|
||||
\item An additional field
|
||||
\end{itemize}
|
||||
\begin{adjustbox}{width=\textwidth,height=5cm,keepaspectratio}
|
||||
\begin{lstlisting}[language=python]
|
||||
misp_attributes = {'input': [...], 'output': [...],
|
||||
'format': 'misp_standard'}
|
||||
\end{lstlisting}
|
||||
\end{adjustbox}
|
||||
\begin{itemize}
|
||||
\item Takes a standard MISP attribute as input
|
||||
\item Can return MISP attributes, objects \& tags
|
||||
\item Supports references
|
||||
\item First examples
|
||||
\begin{itemize}
|
||||
\item urlhaus expansion module
|
||||
\item Joe Sandbox import \& import module
|
||||
\end{itemize}
|
||||
\end{itemize}
|
||||
\end{frame}
|
||||
|
||||
\begin{frame}[fragile]
|
||||
\frametitle{New expansion \& import modules view}
|
||||
\includegraphics[scale=0.2]{new_format_view.png}
|
||||
\end{frame}
|
||||
|
||||
\begin{frame}[fragile]
|
||||
\frametitle{Upcoming additions to the module system - General}
|
||||
|
|
Binary file not shown.
After Width: | Height: | Size: 221 KiB |
Loading…
Reference in New Issue