fix: [blog] adds shortcode for video support

pull/56/head
Christophe Vandeplas 2021-12-31 09:41:17 +01:00
parent 412260ca3c
commit 653672cad7
17 changed files with 18 additions and 30 deletions

View File

@ -25,11 +25,7 @@ In addition to the flexible type format, we added a simple source field which co
MISP 2.4.66 has been released including the improved sightings feature. As you can see below: MISP 2.4.66 has been released including the improved sightings feature. As you can see below:
<div class="myvideo"> {{<video src="/img/video/sighting.webm" title="sightings" >}}
<video style="display:block; width:100%; height:auto;" autoplay controls loop="loop">
<source src="{{ site.baseurl }}/img/blog/misp/video/sighting.webm" type="video/webm" />
</video>
</div>
In previous version of MISP, sightings used the basic counter model as described above. In addition to the classical model, MISP 2.4.66 now allows to do negative sighting to track the numbers of false-positives generated. All the sightings are also tracked per organisation with an additional source. The source allows an organisation to track which equipments or infrastructure generated the sighting. In previous version of MISP, sightings used the basic counter model as described above. In addition to the classical model, MISP 2.4.66 now allows to do negative sighting to track the numbers of false-positives generated. All the sightings are also tracked per organisation with an additional source. The source allows an organisation to track which equipments or infrastructure generated the sighting.

View File

@ -10,11 +10,7 @@ A new version of MISP [2.4.82](https://github.com/MISP/MISP/tree/v2.4.82) has be
MISP includes a nifty real-time publish-subscribe system to notify subscribers on any updates on a MISP instance. 2.4.82 introduced new channels and expanded format MISP includes a nifty real-time publish-subscribe system to notify subscribers on any updates on a MISP instance. 2.4.82 introduced new channels and expanded format
to deliver additional information to the subscribers. The system can be used to feed stream processing automation systems (e.g. IntelMQ), real-time SIEM interaction , monitoring or custom applications. As an example, we developed a complete dashboard application called [misp-dashboard](https://www.github.com/MISP/misp-dashboard) which solely relies on the publish-subscribe ZMQ feature to allow for a geolocalised view, historical searches of geographical information and a contributor dashboard which is the first version of the gamification project in MISP to promote information sharing (a separate post will come soon). to deliver additional information to the subscribers. The system can be used to feed stream processing automation systems (e.g. IntelMQ), real-time SIEM interaction , monitoring or custom applications. As an example, we developed a complete dashboard application called [misp-dashboard](https://www.github.com/MISP/misp-dashboard) which solely relies on the publish-subscribe ZMQ feature to allow for a geolocalised view, historical searches of geographical information and a contributor dashboard which is the first version of the gamification project in MISP to promote information sharing (a separate post will come soon).
<div class="myvideo"> {{<video src="/img/video/misp-zmq-dashboard-integration.mp4" >}}
<video style="display:block; width:100%; height:auto;" autoplay controls loop="loop">
<source src="{{ site.baseurl }}/img/blog/misp/video/misp-zmq-dashboard-integration.mp4" type="video/mp4" />
</video>
</div>
MISP ZMQ has new channels especially related to MISP objects in addition to events and attributes. MISP ZMQ has new channels especially related to MISP objects in addition to events and attributes.

View File

@ -9,11 +9,7 @@ A new version of MISP [2.4.89](https://github.com/MISP/MISP/tree/v2.4.89) has be
We introduced a new functionality allowing analysts and MISP users to view objects and attributes via a graphical visualisation. The event graph view supports the ability to edit objects, attributes and create relationships easily. We have foreseen a host of extensions to the event graph that we will be gradually adding in the future. We introduced a new functionality allowing analysts and MISP users to view objects and attributes via a graphical visualisation. The event graph view supports the ability to edit objects, attributes and create relationships easily. We have foreseen a host of extensions to the event graph that we will be gradually adding in the future.
<div class="myvideo"> {{<video src="/img/video/event-graph.webm" >}}
<video style="display:block; width:100%; height:auto;" autoplay controls loop="loop">
<source src="{{ site.baseurl }}/img/blog/misp/video/event-graph.webm" type="video/webm" />
</video>
</div>
In addition to exporting in the STIX 2.0 format, MISP now supports the importing of STIX 2.0 data, directly from the UI. Significant improvements were made in the parsers for STIX 1.x and STIX 2.0 to support additional types of data. Don't hesitate to send us sample files which don't work as expected to help us improve our mapping. We have also added a warning in the import tool for the STIX import to describe that the STIX format can be lossy compared to the MISP standard format. In addition to exporting in the STIX 2.0 format, MISP now supports the importing of STIX 2.0 data, directly from the UI. Significant improvements were made in the parsers for STIX 1.x and STIX 2.0 to support additional types of data. Don't hesitate to send us sample files which don't work as expected to help us improve our mapping. We have also added a warning in the import tool for the STIX import to describe that the STIX format can be lossy compared to the MISP standard format.

View File

@ -11,7 +11,7 @@ MITRE ATT&CK offers an excellent, efficient and very complete framework to descr
<div class="myvideo"> <div class="myvideo">
<video style="display:block; width:100%; height:auto;" autoplay controls loop="loop"> <video style="display:block; width:100%; height:auto;" autoplay controls loop="loop">
<source src="{{ site.baseurl }}/img/blog/misp/video/attack.webm" type="video/webm" /> <source src="{{ site.baseurl }}/img/video/attack.webm" type="video/webm" />
</video> </video>
</div> </div>

View File

@ -37,9 +37,9 @@ We still have to see how the ``base_score`` is actually computed. In the current
To give the intuition of how the ``base_score`` computation works, let's look at two examples. In these examples, the two *Taxonomies* used are To give the intuition of how the ``base_score`` computation works, let's look at two examples. In these examples, the two *Taxonomies* used are
[*phishing*](https://github.com/MISP/misp-taxonomies/blob/master/phishing/machinetag.json) and [*admiralty-scale*](https://github.com/MISP/misp-taxonomies/blob/master/admiralty-scale/machinetag.json). Both of them contain *Tags* that have a ``numerical_value`` associated to them: [*phishing*](https://github.com/MISP/misp-taxonomies/blob/master/phishing/machinetag.json) and [*admiralty-scale*](https://github.com/MISP/misp-taxonomies/blob/master/admiralty-scale/machinetag.json). Both of them contain *Tags* that have a ``numerical_value`` associated to them:
- <img src="/img/blog/decaying//tag-as-A.png" alt="admiraly-scale:source-reliability = Completely reliable" width="300"/>, ``numerical_value = 100`` - <img src="/img/blog/decaying/tag-as-A.png" alt="admiraly-scale:source-reliability = Completely reliable" width="300"/>, ``numerical_value = 100``
- <img src="/img/blog/decaying//tag-as-D.png" alt="admiraly-scale:source-reliability = Not usually reliable" width="300"/>, ``numerical_value = 25`` - <img src="/img/blog/decaying/tag-as-D.png" alt="admiraly-scale:source-reliability = Not usually reliable" width="300"/>, ``numerical_value = 25``
- <img src="/img/blog/decaying//tag-p-H.png" alt="phishing:psychological-acceptability = high" width="250"/>, ``numerical_value = 75`` - <img src="/img/blog/decaying/tag-p-H.png" alt="phishing:psychological-acceptability = high" width="250"/>, ``numerical_value = 75``
So, if an *Attribute* only has a single *Tag* attached, for example ``admiralty-scale:source-reliability="Completely reliable"``, the ``base_score`` would be: So, if an *Attribute* only has a single *Tag* attached, for example ``admiralty-scale:source-reliability="Completely reliable"``, the ``base_score`` would be:
``` ```
@ -110,21 +110,15 @@ When creating a new *Decaying Model*, modifying its parameters and viewing the o
### Customising the lifetime and the decay speed parameters ### Customising the lifetime and the decay speed parameters
<video src="/img/blog/decaying/dm-tool.mp4" title="Decaying Model Fine Tuning Tool - Parameters" width="800" height="450" controls autoplay loop> {{<video src="/img/blog/decaying/dm-tool.mp4" title="Decaying Model Fine Tuning Tool - Parameters" >}}
Your browser does not support the video tag.
</video>
### Setting the ``base_score``: Customising Taxonomies' weights ### Setting the ``base_score``: Customising Taxonomies' weights
<video src="/img/blog/decaying/dm-bs.mp4" type="video/mp4" title="Decaying Model Fine Tuning Tool - Base score" width="800" height="450" controls autoplay loop> {{<video src="/img/blog/decaying/dm-bs.mp4" type="video/mp4" title="Decaying Model Fine Tuning Tool - Base score" >}}
Your browser does not support the video tag.
</video>
### Viewing scores and simulating the model ### Viewing scores and simulating the model
<video src="/img/blog/decaying/dm-simulation.mp4" type="video/mp4" title="Decaying Model Simulation Tool" width="800" height="450" controls autoplay loop> {{<video src="/img/blog/decaying/dm-simulation.mp4" type="video/mp4" title="Decaying Model Simulation Tool" >}}
Your browser does not support the video tag.
</video>
# Developer perspective: Creating a model using a different algorithm # Developer perspective: Creating a model using a different algorithm

View File

@ -16,7 +16,7 @@ progress of the update can be verified via the interface of your MISP instance u
# Timeline feature and improved data-model # Timeline feature and improved data-model
<video src="/img/blog/timeline-video.mp4" title="Overview of the MISP timeline feature" width="800" height="450" controls autoplay loop>Video tag is not supported by your browser</video> {{<video src="/img/blog/timeline-video.mp4" title="Overview of the MISP timeline feature" >}}
[MISP standard format](https://www.misp-standard.org/) has been extended to support first_seen and last_seen on any attribute or object in a MISP instance. This functionality is fully accessible via the restSearch API and via the user-interface of MISP. first_seen and last_seen can be set at the attribute and/or the object levels. A complete timeline viewer and editor has been added to allow users to: [MISP standard format](https://www.misp-standard.org/) has been extended to support first_seen and last_seen on any attribute or object in a MISP instance. This functionality is fully accessible via the restSearch API and via the user-interface of MISP. first_seen and last_seen can be set at the attribute and/or the object levels. A complete timeline viewer and editor has been added to allow users to:

View File

@ -11,7 +11,7 @@ In the previous version of MISP, the new [Event Report functionality](https://ww
In the current version, the Event Report has been extended to support the automatic discovery of attributes, galaxies and tags from any website captured. In the current version, the Event Report has been extended to support the automatic discovery of attributes, galaxies and tags from any website captured.
<video src="https://www.misp-project.org/img/blog/event-report-demo-extraction-from-url2.mp4" title="Overview video of the new MISP event report functionality and discover of elements" width="800" height="450" controls autoplay loop>Video tag is not supported by your browser</video> {{<video src="https://www.misp-project.org/img/blog/event-report-demo-extraction-from-url2.mp4" title="Overview video of the new MISP event report functionality and discover of elements" >}}
This functionality allows the analysts to collect external reports and automatically discover information which can be used in MISP. This functionality allows the analysts to collect external reports and automatically discover information which can be used in MISP.

View File

@ -0,0 +1,6 @@
<div class="myvideo">
<video style="display:block; width:100%; height:auto;" autoplay controls loop="loop">
<source src="{{ index .Params "src" }}" {{ if isset .Params "title"}} title="{{ index .Params "title" }}" {{end}} />
Sorry, cannot display the video as the video tag is not supported by your browser.
</video>
</div>