MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-26 08:47:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

chg: [doc] move how to contribute to the CONTRIBUTE file

Browse source
This commit is contained in:
Alexandre Dulaunoy 2018-12-01 11:08:18 +01:00
parent bfea2b7948
commit 3e5abbf998
Signed by: adulau
GPG key ID: 09E2CD4944E6CBCD
1 changed files with 1 additions and 21 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
README.md
View file

@ -14,22 +14,6 @@ Vocabularies are from existing standards (like STIX, Veris, MISP and so on) or c
The objective is to have a comment set of clusters for organizations starting analysis but that can be expanded The objective is to have a comment set of clusters for organizations starting analysis but that can be expanded
to localized information (which is not shared) or additional information (that can be shared). to localized information (which is not shared) or additional information (that can be shared).
# Dependencies
To create your own Galaxies the following tools are needed to run the validation scripts.
- jsonschema (>v2.4)
- jq
- moreutils (sponge)
On a Debian flavoured distribution you can potentially do this:
```bash
sudo apt install jq moreutils python3-jsonschema
sudo wget -O /usr/local/bin/jsonschema https://gist.githubusercontent.com/SteveClement/e6ac60e153e9657913000216fc77c6ef/raw/c273ace06ad338d609dd2c84a0a6e215a268ea11/jsonschema
sudo chmod +x /usr/local/bin/jsonschema # This will only work with jsonschema >2.4 (before no CLI interface was available)
```
# Available clusters # Available clusters
- [clusters/android.json](clusters/android.json) - Android malware galaxy based on multiple open sources. - [clusters/android.json](clusters/android.json) - Android malware galaxy based on multiple open sources.
@ -99,11 +83,7 @@ Starting from [MISP 2.4.56](http://www.misp-project.org/2016/12/07/MISP.2.4.56.r
![MISP Integration of the MISP galaxy](doc/images/screenshot.png) ![MISP Integration of the MISP galaxy](doc/images/screenshot.png)
## How to contribute? ## How to contribute?
In the world of threat intelligence, there are many different models or approaches to order, classify or describe threat actors, threats or activity groups. We welcome new ways of describing threat intelligence as the galaxy model allows to reuse the ones you use or trust for your organization or community. - [Read the contribution document](CONTRIBUTE.md)
Fork the project, update or create elements or clusters and make a pull-request.
We recommend to validate the JSON file using [jq](https://stedolan.github.io/jq/) and [validate_all.sh](https://github.com/MISP/misp-galaxy/blob/master/validate_all.sh) before doing a pull-request.
## License ## License