add: [cti-summit] Added base slides that will be extended

events/misp-summit/2022/misp-stix/build.sh

@@ -0,0 +1,3 @@
+export TEXINPUTS=::~/git/misp-training/themes/
+echo ${TEXINPUTS}
+pdflatex slide.tex

events/misp-summit/2022/misp-stix/content.aux

@@ -0,0 +1,47 @@
+\relax 
+\providecommand\hyper@newdestlabel[2]{}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{1}{1/1}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {1}{1}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{2}{2/2}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {2}{2}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{3}{3/3}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {3}{3}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{4}{4/4}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {4}{4}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{5}{5/5}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {5}{5}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{6}{6/6}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {6}{6}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{7}{7/7}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {7}{7}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{8}{8/8}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {8}{8}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{9}{9/9}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {9}{9}}}
+\@setckpt{content}{
+\setcounter{page}{10}
+\setcounter{equation}{0}
+\setcounter{enumi}{0}
+\setcounter{enumii}{0}
+\setcounter{enumiii}{0}
+\setcounter{enumiv}{0}
+\setcounter{footnote}{3}
+\setcounter{mpfootnote}{0}
+\setcounter{beamerpauses}{1}
+\setcounter{bookmark@seq@number}{0}
+\setcounter{lecture}{0}
+\setcounter{part}{0}
+\setcounter{section}{0}
+\setcounter{subsection}{0}
+\setcounter{subsubsection}{0}
+\setcounter{subsectionslide}{9}
+\setcounter{framenumber}{8}
+\setcounter{figure}{0}
+\setcounter{table}{0}
+\setcounter{parentequation}{0}
+\setcounter{theorem}{0}
+\setcounter{realframenumber}{8}
+\setcounter{lstnumber}{1}
+\setcounter{section@level}{0}
+\setcounter{lstlisting}{0}
+}

events/misp-summit/2022/misp-stix/content.tex

@@ -0,0 +1,130 @@
+% DO NOT COMPILE THIS FILE DIRECTLY!
+% This is included by the other .tex files.
+
+\begin{frame}[t,plain]
+\titlepage
+\end{frame}
+
+\begin{frame}
+    \frametitle{MISP \& STIX}
+    \begin{itemize}
+        \item{\bf Built-in integration}
+        \item Export \& Import features
+        \begin{itemize}
+            \item Export MISP Events collections
+            \item Import STIX files
+        \end{itemize}
+        \item Supported version
+        \begin{itemize}
+            \item STIX 1.1.1
+            \item STIX 2.0
+        \end{itemize}
+        \item Accessible via restSearch
+    \end{itemize}
+\end{frame}
+
+\begin{frame}
+    \frametitle{Limitations}
+    \begin{itemize}
+        \item Feature limitations
+        \begin{itemize}
+            \item Supported versions
+            \item Data type support
+        \end{itemize}
+        \item []
+        \item Practical limitations
+        \begin{itemize}
+            \item Export and import features only available via MISP rest client
+            \item {\bf Github}: STIX issues lost within the MISP core issues
+        \end{itemize}
+    \end{itemize}
+\end{frame}
+
+\begin{frame}
+    \frametitle{The solution}
+    \begin{center}
+        \includegraphics[scale=0.3]{images/solution.png}
+    \end{center}
+\end{frame}
+
+\begin{frame}
+    \frametitle{Handling the conversion with a python library}
+    \begin{itemize}
+        \item Revamp of the source code
+        \item Enable a standalone use of the python code
+        \begin{itemize}
+            \item MISP JSON  format -> STIX
+            \item Pass files with MISP JSON format -> get file with the export results in STIX
+        \end{itemize}
+        \item []
+        \item Possible integration within python code
+    \end{itemize}
+\end{frame}
+
+\begin{frame}
+    \frametitle{Key features}
+    \begin{itemize}
+        \item Support all the STIX versions
+        \begin{itemize}
+            \item {\bf STIX 2.1 Support}
+            \item 1.1.1, 1.2, 2.0 Support enhanced
+        \end{itemize}
+        \item Various MISP data collection supported
+        \item[]
+        \item {\bf Mapping documentation}
+        \item Package available on PyPI\footnote{https://pypi.org/project/misp-stix/}
+    \end{itemize}
+\end{frame}
+
+\begin{frame}
+    \frametitle{Work in Progress \& Next improvements}
+    \begin{itemize}
+        \item WiP
+        \begin{itemize}
+            \item {\bf Implement the import feature}
+            \item Support of existing STIX objects libraries\footnote{https://github.com/mitre/cti}
+        \end{itemize}
+        \item Next features on the roadmap
+        \begin{itemize}
+            \item Extend the export feature to any kind of data collection
+            \item Support custom STIX format\footnote{Especially while importing STIX data, {\bf and as long as we can implement support of well defined versions}}
+        \end{itemize}
+        \item Continuous improvement
+        \begin{itemize}
+            \item Mapping improvement
+            \item More tests to avoid edge case issues
+        \end{itemize}
+    \end{itemize}
+\end{frame}
+
+\begin{frame}
+    \frametitle{How to report bugs/issues}
+    \begin{itemize}
+        \item Github issues
+        \begin{itemize}
+            \item {\bf https://github.com/MISP/misp-stix/issues}
+            \item https://github.com/MISP/MISP/issues
+        \end{itemize}
+        \item []
+        \item Please provide details
+        \begin{itemize}
+            \item How did the issue happen
+            \item {\bf Recommendation}: provide samples
+        \end{itemize}
+        \item[]
+        \item Any feedback welcome
+    \end{itemize}
+\end{frame}
+
+\begin{frame}
+    \frametitle{To get in touch with us}
+    \begin{itemize}
+        \item \url{https://github.com/MISP/misp-stix}
+        \item \url{https://github.com/MISP/misp-stix/tree/main/documentation}
+        \item []
+        \item \url{https://github.com/MISP}
+        \item \url{https://www.misp-project.org/}
+        \item \url{https://twitter.com/MISPProject}
+        \item \url{https://twitter.com/chrisred_68}
+    \end{itemize}
+\end{frame}

events/misp-summit/2022/misp-stix/slide.aux

@@ -0,0 +1,27 @@
+\relax 
+\providecommand\hyper@newdestlabel[2]{}
+\providecommand\HyperFirstAtBeginDocument{\AtBeginDocument}
+\HyperFirstAtBeginDocument{\ifx\hyper@anchor\@undefined
+\global\let\oldcontentsline\contentsline
+\gdef\contentsline#1#2#3#4{\oldcontentsline{#1}{#2}{#3}}
+\global\let\oldnewlabel\newlabel
+\gdef\newlabel#1#2{\newlabelxx{#1}#2}
+\gdef\newlabelxx#1#2#3#4#5#6{\oldnewlabel{#1}{{#2}{#3}}}
+\AtEndDocument{\ifx\hyper@anchor\@undefined
+\let\contentsline\oldcontentsline
+\let\newlabel\oldnewlabel
+\fi}
+\fi}
+\global\let\hyper@last\relax 
+\gdef\HyperFirstAtBeginDocument#1{#1}
+\providecommand\HyField@AuxAddToFields[1]{}
+\providecommand\HyField@AuxAddToCoFields[2]{}
+\providecommand\BKM@entry[2]{}
+\@input{content.aux}
+\pgfsyspdfmark {pgfid1}{1398509}{16636717}
+\@writefile{nav}{\headcommand {\beamer@partpages {1}{9}}}
+\@writefile{nav}{\headcommand {\beamer@subsectionpages {1}{9}}}
+\@writefile{nav}{\headcommand {\beamer@sectionpages {1}{9}}}
+\@writefile{nav}{\headcommand {\beamer@documentpages {9}}}
+\@writefile{nav}{\headcommand {\gdef \inserttotalframenumber {8}}}
+\gdef \@abspage@last{9}

events/misp-summit/2022/misp-stix/slide.nav

@@ -0,0 +1,23 @@
+\headcommand {\slideentry {0}{0}{1}{1/1}{}{0}}
+\headcommand {\beamer@framepages {1}{1}}
+\headcommand {\slideentry {0}{0}{2}{2/2}{}{0}}
+\headcommand {\beamer@framepages {2}{2}}
+\headcommand {\slideentry {0}{0}{3}{3/3}{}{0}}
+\headcommand {\beamer@framepages {3}{3}}
+\headcommand {\slideentry {0}{0}{4}{4/4}{}{0}}
+\headcommand {\beamer@framepages {4}{4}}
+\headcommand {\slideentry {0}{0}{5}{5/5}{}{0}}
+\headcommand {\beamer@framepages {5}{5}}
+\headcommand {\slideentry {0}{0}{6}{6/6}{}{0}}
+\headcommand {\beamer@framepages {6}{6}}
+\headcommand {\slideentry {0}{0}{7}{7/7}{}{0}}
+\headcommand {\beamer@framepages {7}{7}}
+\headcommand {\slideentry {0}{0}{8}{8/8}{}{0}}
+\headcommand {\beamer@framepages {8}{8}}
+\headcommand {\slideentry {0}{0}{9}{9/9}{}{0}}
+\headcommand {\beamer@framepages {9}{9}}
+\headcommand {\beamer@partpages {1}{9}}
+\headcommand {\beamer@subsectionpages {1}{9}}
+\headcommand {\beamer@sectionpages {1}{9}}
+\headcommand {\beamer@documentpages {9}}
+\headcommand {\gdef \inserttotalframenumber {8}}

events/misp-summit/2022/misp-stix/slide.tex

@@ -0,0 +1,24 @@
+\documentclass{beamer}
+\usetheme[numbering=progressbar]{focus}
+\definecolor{main}{RGB}{47, 161, 219}
+\definecolor{textcolor}{RGB}{128, 128, 128}
+\definecolor{background}{RGB}{240, 247, 255}
+
+\usepackage[utf8]{inputenc}
+\usepackage{tikz}
+\usepackage{listings}
+\usetikzlibrary{positioning}
+\usetikzlibrary{shapes,arrows}
+
+
+\title{MISP-STIX Project}
+\subtitle{Python library to convert MISP <-> STIX}
+\author{MISP core team \\ \emph{TLP:WHITE}}
+\date{CTI Summit (CTIS-2022)}
+\titlegraphic{\includegraphics[scale=0.55]{misp.pdf}}
+\institute{MISP Project \\ \url{https://www.misp-project.org/}}
+
+
+\begin{document}
+\include{content}
+\end{document}