MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-26 16:57:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
779 commits 6 branches 47 tags 96 MiB
Commit graph

407 commits

Author SHA1 Message Date
Raphaël Vinot
756af14983 Merge branch 'master' of github.com:MISP/misp-galaxy 2017-10-27 10:50:58 -04:00
Raphaël Vinot
eef988e9ad Cosmetic updates 2017-10-27 10:50:47 -04:00
Deborah Servili
7246746bbe add htpRAT 2017-10-27 15:50:22 +02:00
Deborah Servili
2fefd3810d add dimnie 2017-10-27 11:42:01 +02:00
Deborah Servili
ad9fff6c3f Merge pull request #103 from Delta-Sierra/master 
add Formbook
 2017-10-27 10:40:00 +02:00
Deborah Servili
2533c1b54e fix typo 2017-10-27 10:33:58 +02:00
Deborah Servili
5597e5af1c add Formbook 2017-10-27 10:30:21 +02:00
Raphaël Vinot
24e7d89ac9 Deduplicate Android cluster 2017-10-26 19:00:57 -04:00
Raphaël Vinot
40e26a59f1 Merge branch 'master' of github.com:MISP/misp-galaxy 2017-10-26 18:54:56 -04:00
Raphaël Vinot
6d0952e4ed Add android and banker galaxies 2017-10-26 18:53:01 -04:00
Alexandre Dulaunoy
aed963c52d Merge pull request #102 from Delta-Sierra/master 
delete x_ prefix from mitre_attack_pattern
 2017-10-26 10:36:02 +02:00
Deborah Servili
709b78c2de jq 2017-10-26 10:28:53 +02:00
Deborah Servili
3a41799542 add galaxy icon to mitre-cti tools & regenerate galaxies 2017-10-26 10:28:05 +02:00
Deborah Servili
fa8c4ec839 delete x_ prefix from mitre_attack_pattern 2017-10-26 09:44:23 +02:00
Raphaël Vinot
72dbbb28fa Remove the executable flag from the json files, again 2017-10-25 12:29:16 -04:00
Raphaël Vinot
c6f9c5261c Merge branch 'master' of github.com:MISP/misp-galaxy 2017-10-25 12:28:01 -04:00
Raphaël Vinot
196f0a7ac8 Remove the executable flag from the json files 2017-10-25 12:25:36 -04:00
Deborah Servili
6aee8e41fd add BadRabbit ransomware 2017-10-25 09:28:03 +02:00
Deborah Servili
5b7e2de87a add cert EU govsectors galaxy 2017-10-24 11:15:05 +02:00
Alexandre Dulaunoy
ce0f4d5e4a
SOCKET23 RAT added 2017-10-21 15:14:42 +02:00
Alexandre Dulaunoy
3860b1a78a
JadeRAT added 2017-10-21 13:53:40 +02:00
Deborah Servili
814c19841f jq 2017-10-20 15:32:01 +02:00
Deborah Servili
2fd3d3221d add IoT_reaper 2017-10-20 15:09:20 +02:00
Deborah Servili
a6d5383adf add synonym in tool galaxy 2017-10-18 15:43:12 +02:00
Deborah Servili
aa5e823801 add sectors galaxy 2017-10-11 09:52:33 +02:00
Deborah Servili
fa723b6e90 add lukitus ransomnote to Locky 2017-10-04 09:32:55 +02:00
Deborah Servili
671d7ea456 add lukitus extension to Locky 2017-10-04 09:22:53 +02:00
Deborah Servili
fa5cb66a84 fix typo 2017-10-04 08:38:12 +02:00
Deborah Servili
13f0b95654 add year of apparition for Rats + fixing some typos 2017-10-03 16:26:58 +02:00
Deborah Servili
4f73184818 jq 2017-09-29 17:02:12 +02:00
Deborah Servili
b33014e0dd add Remote Access/Administration Tools 2017-09-29 16:59:25 +02:00
Daniel Plohmann
02710714bd add APT33 as identified by FireEye 2017-09-29 11:43:38 +02:00
Deborah Servili
fecfdd39f3 add Adwind RAT synonyms 2017-09-25 15:18:51 +02:00
Deborah Servili
38f9d2cbfd Fix typo 2017-09-20 10:00:27 +02:00
Deborah Servili
c282899db7 add SyncCrypt Ransomwar 2017-09-06 15:23:27 +02:00
Deborah Servili
bba45c7fe6 add SynAck Ransomware ransomnote's name 2017-09-06 14:00:00 +02:00
Deborah Servili
5e11faaa92 add SynAck Ransomware 2017-09-06 13:45:24 +02:00
Deborah Servili
d07d4fbfa7 fix typo~ 2017-09-06 10:04:57 +02:00
Deborah Servili
da5b1d2ed3 add tools and rat 2017-09-06 09:51:52 +02:00
Raphaël Vinot
568557c1af JQ all the things. 2017-08-30 10:08:35 +02:00
Alexandre Dulaunoy
381b608900
Fixed with jq ;-) 2017-08-30 10:04:19 +02:00
Kafeine
4b94d36d2e Merge branch 'master' into master 2017-08-29 12:41:33 +01:00
Kafeine
ee3e2b3a14 +WhiteHole +ref for Disdain 2017-08-29 10:36:38 +01:00
Deborah Servili
a2035e5840 add ransomwares 2017-08-28 11:14:27 +02:00
Deborah Servili
15ce9fb85d add fireball malware 2017-08-24 16:10:17 +02:00
Deborah Servili
63b7e62de5 add Joao malware 2017-08-24 08:49:42 +02:00
Alexandre Dulaunoy
760f863f8a
EngineBox malware added 2017-08-19 09:38:45 +02:00
Deborah Servili
ad22bafdba jq 2017-08-17 15:54:44 +02:00
Deborah Servili
91cd3a6eec update mitre galaxies 2017-08-17 15:53:41 +02:00
iglocska
cf780290be Fixed some issues with a misnamed galaxy 2017-08-16 21:40:05 +02:00
Deborah Servili
7e391e8a39 version is integer 2017-08-16 15:23:58 +02:00
Deborah Servili
7cb372bdb5 put uuid as meta 2017-08-16 15:13:18 +02:00
Deborah Servili
447bfe93f3 new generation of mitre galaxies 2017-08-16 12:37:07 +02:00
Deborah Servili
fb5560f927 add mitre based galaxies 2017-08-16 12:17:00 +02:00
Deborah Servili
d29fb670c0 fix space typo 2017-08-16 10:50:12 +02:00
Kafeine
bde18d917f +disdain+captainblack-Neutrino 2017-08-15 20:53:41 +02:00
Deborah Servili
693ea7e58a type is array -shh I'm bad with the format, I know 2017-08-08 15:00:06 +02:00
Deborah Servili
6d7ec00907 type is meta 2017-08-08 12:44:37 +02:00
Deborah Servili
fa813f0f20 jq~ 2017-08-08 12:40:35 +02:00
Deborah Servili
d6a4e3a5a0 add/update tool galaxy 2017-08-08 12:37:14 +02:00
Deborah Servili
4482e198a0 add GlobeImposter synonym 2017-08-08 08:50:36 +02:00
Raphaël Vinot
3b7ad8ea8c Merge pull request #75 from Delta-Sierra/master 
add svpeng tool
 2017-08-02 11:21:24 +02:00
Deborah Servili
ca58a2f8b4 jq 2017-08-02 11:16:21 +02:00
Daniel Plohmann
355a230182 added FIN7 as alias for anunak 2017-08-01 13:29:57 +02:00
Daniel Plohmann
b4e49823dd merged barium into axiom (only one redundant reference given) 2017-08-01 13:13:56 +02:00
Deborah Servili
8573d28493 Merge branch 'master' into master 2017-08-01 10:18:18 +02:00
Deborah Servili
c8fa7a919f try to merge 'CowerSnail added' 2017-08-01 10:04:25 +02:00
Deborah Servili
52cd886ceb add svpeng tool 2017-08-01 09:44:38 +02:00
Alexandre Dulaunoy
fda915f2f6
CowerSnail added 2017-07-30 18:46:20 +02:00
Raphaël Vinot
81d304345f Remove duplicates 2017-07-26 14:57:14 +02:00
Raphaël Vinot
282c3a8101 Merge pull request #74 from Delta-Sierra/master 
adding clusters based on MISP data
 2017-07-26 11:41:00 +02:00
Deborah Servili
497ecc396a clean tool.json 2017-07-26 09:41:08 +02:00
Deborah Servili
7e59f14dca update Spring Dragon threat actor 2017-07-26 09:21:36 +02:00
Raphaël Vinot
c971b8e935 Add missing name XtremeRAT 2017-07-25 20:24:00 +02:00
Raphaël Vinot
8598210895 Remove empty string. 2017-07-25 18:02:11 +02:00
Raphaël Vinot
a2567a9fc3 Remove duplicates 2017-07-25 13:12:48 +02:00
Deborah Servili
a6eb7338b3 adding clusters based on MISP data 2017-07-19 16:25:46 +02:00
Kafeine
a39dde6dba Update exploit-kit.json 2017-07-13 09:33:23 +01:00
Alexandre Dulaunoy
3b13a9101c Merge branch 'master' of github.com:MISP/misp-galaxy 2017-07-08 10:16:29 +02:00
Alexandre Dulaunoy
a295d40589 Cobalt gang added 2017-07-08 10:16:11 +02:00
Alexandre Dulaunoy
4177bf150c Merge pull request #73 from Delta-Sierra/master 
add cerber synonym
 2017-06-30 10:45:06 +02:00
Deborah Servili
a2bc1e97de add cerber synonym 2017-06-30 10:03:57 +02:00
Alexandre Dulaunoy
c0786dfb22 El Machete added 2017-06-26 11:44:46 +02:00
Deborah Servili
c12009921a add synonym for ammyyadmin 2017-06-21 11:02:57 +02:00
Deborah Servili
d01cfb8d1e Add SOREBRECT ransomware 2017-06-21 08:56:03 +02:00
Alexandre Dulaunoy
dd2a51037a jq all ;-) 2017-06-20 20:34:04 +02:00
Jaime
f92b9cb710 Added FIN8 actor 2017-06-20 11:28:32 -07:00
Deborah Servili
aa25157403 alwaaays moooore RAT 2017-06-20 12:26:16 +02:00
Deborah Servili
5f5b71aa93 add rats from https://www.lifewire.com/free-remote-access-software-tools-2625161 2017-06-20 11:16:36 +02:00
Deborah Servili
57f6c2414d add rats 2017-06-20 09:19:19 +02:00
Alexandre Dulaunoy
951ed3b9ed jq 2017-06-16 22:18:51 +02:00
Alexandre Dulaunoy
3219d5de5c Merge pull request #67 from Delta-Sierra/master 
add some rats and tools
 2017-06-16 22:18:14 +02:00
Deborah Servili
91cf7b4cee add some rats sand tools 2017-06-16 15:34:20 +02:00
David André
3dfbb7e1d0 Added Symantec alias for sofacy 2017-06-16 11:22:17 +02:00
danielplohmann
5724f19873 Merge branch 'master' into hidden-cobra-lazarus 2017-06-15 14:13:50 +02:00
Daniel Plohmann (jupiter)
f7963c9a8c added Hidden Cobra as alias for Lazarus Group 2017-06-15 14:09:29 +02:00
Daniel Plohmann
ff4f428bc1 added ELECTRUM to threat-actor.json (afaik not confirmed as an alias atm) 2017-06-13 13:25:16 +02:00
Daniel Plohmann
9924a8875c added PLATINUM to threat-actor.json (afaik not confirmed as an alias atm) 2017-06-13 13:21:10 +02:00
Deborah Servili
e95b0fb6e1 Merge https://github.com/MISP/misp-galaxy 2017-06-09 09:06:23 +02:00
Deborah Servili
0755e11c02 update rat 2017-06-09 09:01:33 +02:00
Alexandre Dulaunoy
91663c4793 Merge pull request #58 from danielplohmann/wildneutron 
added WildNeutron (Morph, Butterfly, Sphinx Moth)
 2017-06-06 10:02:56 +02:00
Deborah Servili
aa34718b13 edit threat actor - should fix #59 and #60 2017-06-06 08:40:29 +02:00
Daniel Plohmann (jupiter)
068dc40a78 added WildNeutron (Morph, Butterfly, Sphinx Moth) 2017-06-05 19:13:27 +02:00
Alexandre Dulaunoy
8796017151 Merge pull request #56 from elhoim/patch-1 
Added synonyms for APT10 and one for APT1
 2017-06-02 16:41:20 +02:00
Deborah Servili
bf8c050b8b jq 2017-06-02 15:52:43 +02:00
Deborah Servili
17c0ffb255 add RAT listed in https://github.com/kevthehermit/RATDecoders 2017-06-02 15:40:06 +02:00
David André
83833f257c Added synonyms for APT10 and one for APT1 2017-06-02 10:26:45 +02:00
Deborah Servili
c9ede88868 add rat galaxy 2017-05-31 16:39:19 +02:00
Alexandre Dulaunoy
fab863933e SilverTerrier added 2017-05-30 08:40:26 +02:00
Alexandre Dulaunoy
dcfbfdfe47 jq all 2017-05-26 14:59:34 +02:00
Alexandre Dulaunoy
d95351a72a Merge branch 'master' of github.com:MISP/misp-galaxy 2017-05-26 14:52:50 +02:00
Alexandre Dulaunoy
b562e6b729 Emotet/Geodo added 2017-05-26 14:52:35 +02:00
Deborah Servili
14835361f7 jq 'n ##COMMA## 2017-05-18 14:01:49 +02:00
Deborah Servili
7fee4f3a1b add Uiwik ransomware 2017-05-18 13:59:47 +02:00
Deborah Servili
3b93a773e5 add synonym and cleaning 2017-05-18 11:18:32 +02:00
Deborah Servili
2c4256f42c merge hiddentear & cryptear data 2017-05-18 10:18:45 +02:00
Deborah Servili
bc4f1a93ab add synonym - half done 2017-05-18 09:19:48 +02:00
Deborah Servili
6859b2fb4e add synonym - step 1 2017-05-17 12:14:10 +02:00
Deborah Servili
c501517e9a add synonym to hancitor 2017-05-17 12:00:26 +02:00
Deborah Servili
66ca4c6f2a add jaff Ransomwarejq-ed 2017-05-17 10:10:27 +02:00
Deborah Servili
44857c2ac3 add jaff Ransomware 2017-05-17 10:08:53 +02:00
Alexandre Dulaunoy
3e62608d3a Remove duplicate ref 2017-05-16 14:52:53 +02:00
Alexandre Dulaunoy
e5faf4fba7 Input from Deborah incorporated 2017-05-16 14:47:16 +02:00
Alexandre Dulaunoy
5da5df6384 APT32 added 2017-05-15 09:18:28 +02:00
Alexandre Dulaunoy
bd18dc2f4b WannaCry added 2017-05-14 16:37:37 +02:00
Kafeine
2182a790a3 Fix 2017-05-11 11:31:22 +01:00
Kafeine
6d90c3e691 +Bingo -- Hunter > Retired 2017-05-11 11:30:50 +01:00
Alexandre Dulaunoy
248eecaef0 Kazuar: Multiplatform Espionage Backdoor with API Access added 2017-05-04 17:22:28 +02:00
Kafeine
32b0e6f95d Update tds.json 2017-05-04 11:48:49 +01:00
Alexandre Dulaunoy
f5d356523e Duplicate references removed 2017-05-03 15:59:24 +02:00
Alexandre Dulaunoy
ea611bcded Merge pull request #49 from Delta-Sierra/master 
reformat ransomware galaxy
 2017-05-03 15:56:39 +02:00
Déborah Servili
9ff5f58978 add source to please the schema~ 2017-05-03 15:21:58 +02:00
Déborah Servili
0a9814d6eb change sources for authors 2017-05-03 15:15:34 +02:00
Déborah Servili
2dc6982fae jq on ransomware 2017-05-03 15:09:23 +02:00
Déborah Servili
fb5eb32a0e managing duplicate 2017-05-03 15:01:20 +02:00
Déborah Servili
8b10e3aaee managing duplicate 2017-05-03 14:24:53 +02:00
Déborah Servili
24c6c51e4d reformat ransomware galaxy - including http://pastebin.com/raw/GHgpWjar 2017-05-02 14:16:21 +02:00
Déborah Servili
82f4a633c0 reformat ransomware galaxy 2017-05-02 10:00:00 +02:00
Alexandre Dulaunoy
35b94437e8 REDLEAVES malware added 2017-04-28 08:32:34 +02:00
Déborah Servili
c08cc781f5 update tools 2017-04-26 12:23:57 +02:00
Alexandre Dulaunoy
3e4973f688 Feodo added 2017-04-25 19:56:06 +02:00
Déborah Servili
6267681362 add Cardinal RAT 2017-04-24 16:04:52 +02:00
Alexandre Dulaunoy
07c82e15a5 FlexiSpy 2017-04-23 23:05:12 +02:00
Alexandre Dulaunoy
52edcb1929 shadow broker leak of NSA tools from https://github.com/misterch0c/shadowbroker 2017-04-15 21:22:32 +02:00
Alexandre Dulaunoy
6149740cd4 First batch of shadow broker leak (NSA name of exploit and tools) from 
https://github.com/misterch0c/shadowbroker
 2017-04-15 19:40:54 +02:00
Alexandre Dulaunoy
3595d04b35 jq all 2017-04-14 16:28:43 +02:00
Alexandre Dulaunoy
fa49ca127c Merge pull request #40 from Kafeine/master 
Updated.
 2017-04-14 16:27:15 +02:00
Déborah Servili
7163e8c58c add synonyms for Da Vinci RCS 2017-04-14 15:51:39 +02:00
Déborah Servili
531595c944 ##comma## 2017-04-14 14:52:23 +02:00
Déborah Servili
54512eb840 Add some tools/threat actor 2017-04-14 14:48:39 +02:00