252 commits

Author	SHA1	Message	Date
Nils Kuhnert	1e4ebdd560	Added OilRig synonym "Helix Kitten".	2018-12-27 09:10:21 +01:00
Daniel Plohmann	cc22da1200	Microsoft alias for apt29 is YTTRIUM	2018-12-19 11:28:44 +01:00
Daniel Plohmann	c9e15b0c08	new name SNAKEMACKEREL for APT28 by Accenture	2018-12-19 10:46:58 +01:00
Deborah Servili	cb4345adf9	add operation sharpshooter	2018-12-13 13:47:54 +01:00
Deborah Servili	70d68a312c	add some clusters or info	2018-12-12 15:26:54 +01:00
Deborah Servili	169d69871a	add Goden Chickens and affiliates	2018-12-12 13:52:55 +01:00
Deborah Servili	bf77e1125a	add Operation Poison Needles	2018-12-07 16:32:09 +01:00
Deborah Servili	79828d7411	add clusters	2018-12-07 13:25:56 +01:00
Deborah Servili	5a725e71ef	add several clusters	2018-12-06 16:13:51 +01:00
Deborah Servili	be9b4ff40f	add DNSpionage cluster	2018-11-29 16:38:06 +01:00
Deborah Servili	b50c8bd805	add PNG Dropper	2018-11-23 10:38:36 +01:00
Deborah Servili	2bf5d46cc4	Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy	2018-11-22 08:59:53 +01:00
Deborah Servili	2f5031b845	add several references for Emotet and others	2018-11-22 08:37:45 +01:00
Deborah Servili	de38e7249c	Merge branch 'master' into master	2018-11-19 15:23:45 +01:00
Deborah Servili	ce61b2d2dd	update oilrig related clusters + others	2018-11-19 14:56:13 +01:00
Alexandre Dulaunoy	c9fd60d14b	chg: [threat-actor] INDRIK SPIDER added	2018-11-14 20:46:06 +01:00
Deborah Servili	ca33f1c2ce	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-11-13 15:25:34 +01:00
Deborah Servili	f55277b682	add several rqansomware and HookAds campaign	2018-11-13 12:20:37 +01:00
Alexandre Dulaunoy	a4c916c916	Merge branch 'master' of github.com:MISP/misp-galaxy	2018-11-13 07:01:56 +01:00
Benoit Sevens	8f8c69134e	Update threat-actor.json ... Add LuckyMouse link	2018-11-12 13:12:14 +01:00
Deborah Servili	14444e4321	add several tools and refs	2018-11-08 10:39:32 +01:00
Daniel Plohmann	1f6b606f75	added APT38 as (FireEye) alias for Lazarus ... cross-references in https://content.fireeye.com/apt/rpt-apt38 suggest the link to Lazarus.	2018-11-07 17:19:50 +01:00
Alexandre Dulaunoy	2465235817	Merge pull request #293 from Delta-Sierra/master ... add Operation EvilTraffic	2018-10-30 21:02:59 +01:00
Deborah Servili	e6b1eec329	add Chalubo botnet (+ jqallthethings)	2018-10-30 14:39:13 +01:00
Deborah Servili	41942d0daf	add Operation EvilTraffic	2018-10-30 13:28:46 +01:00
Deborah Servili	74ff4b957a	add Operation EvilTraffic	2018-10-30 13:28:27 +01:00
Nils Kuhnert	bc0bf1ca9f	Corrected DarkHotel threat actor entry	2018-10-29 09:03:30 +01:00
Deborah Servili	af6020077e	add August Stealer	2018-10-23 15:25:37 +02:00
Deborah Servili	bd68ee280e	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-10-22 11:09:37 +02:00
Deborah Servili	4564c5eb37	add DarkPulsar and affiliates + update some refs	2018-10-22 10:14:30 +02:00
Christophe Vandeplas	9dddc4427c	jq	2018-10-19 10:23:09 +02:00
Christophe Vandeplas	ddccac58c8	chg: categorization of galaxies ... This allows relationships to be created.	2018-10-19 10:18:14 +02:00
Christophe Vandeplas	2b24efb14a	fix: add missing relations from commit b857be9cab	2018-10-17 19:15:57 +02:00
Christophe Vandeplas	873bc873b4	Merge remote-tracking branch 'MISP/master'	2018-10-17 18:28:44 +02:00
Christophe Vandeplas	1e90cac717	fix: intrusion is an actor and not a tool	2018-10-17 18:17:33 +02:00
Deborah Servili	c8cbb609a2	add GreyEnergy	2018-10-17 16:05:51 +02:00
Deborah Servili	2ea560f9a7	add refs & synonyms	2018-10-15 12:02:21 +02:00
Deborah Servili	11a27df82d	add roaming mantis group	2018-10-12 15:50:52 +02:00
Deborah Servili	b3109f6aea	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-10-12 13:55:01 +02:00
Christophe Vandeplas	f26a4f2806	fix: minor newline difference after jq_all_the	2018-10-12 12:31:29 +02:00
Christophe Vandeplas	f14d616e22	chg: magical mapping with malpedia	2018-10-12 11:00:00 +02:00
Christophe Vandeplas	2fbd8ce485	jq sort keys ... Allows automation to edit the files	2018-10-12 10:35:31 +02:00
Deborah Servili	4c367737ac	add magecart ref	2018-10-10 14:52:16 +02:00
Deborah Servili	5bcf34a953	update regarding https://twitter.com/adulau/status/1047764090410737664	2018-10-04 10:28:22 +02:00
Deborah Servili	c78416eee1	update synonyms & attributions	2018-10-04 10:09:34 +02:00
Deborah Servili	3dfe8a5a34	add FASTCash	2018-10-03 15:09:14 +02:00
Deborah Servili	403f162451	add ref for magecart	2018-10-01 11:54:07 +02:00
Deborah Servili	35582f7ed5	new threat actors & tools	2018-10-01 11:52:40 +02:00
Alexandre Dulaunoy	49fe210812	Merge pull request #270 from Delta-Sierra/master ... new clusters, relations and information	2018-09-28 12:57:13 +02:00
Deborah Servili	fbf21487cf	new clusters and informtion	2018-09-28 11:08:21 +02:00
Nex	014aa325b7	Added missing country values	2018-09-26 23:05:46 +02:00
Deborah Servili	f7e10cb38d	add references	2018-09-24 14:58:21 +02:00
Deborah Servili	2bc8e1e719	add Cobalt Dickensthreat actor	2018-09-24 11:51:09 +02:00
Deborah Servili	5a1734f170	update version	2018-09-21 11:16:36 +02:00
Deborah Servili	3c7e367cbf	fix field mistake	2018-09-21 11:14:19 +02:00
Deborah Servili	1cee9d71e0	update Lazarus group cluster	2018-09-20 15:38:32 +02:00
Deborah Servili	6d43d52731	new unnamedthreat actor	2018-09-20 13:24:11 +02:00
Deborah Servili	d0864a6531	new threat actors	2018-09-20 12:10:20 +02:00
Deborah Servili	0a724bee3d	merge	2018-09-19 16:01:46 +02:00
Deborah Servili	058f778e61	add references	2018-09-19 09:04:04 +02:00
Alexandre Dulaunoy	79146b9d10	fix: array in synonyms (MISP accepts it but not the schema ;-)	2018-09-19 07:35:35 +02:00
Alexandre Dulaunoy	6105522453	chg: [threat-actor] Iron Group added ... ref: https://www.intezer.com/iron-cybercrime-group-under-the-scope-2/	2018-09-19 07:08:16 +02:00
Alexandre Dulaunoy	8238bd5eb1	Merge pull request #263 from botherder/bahamut ... Added Bahamut to threat actors list	2018-09-19 06:46:26 +02:00
Nex	f0383758fc	Added Bahamut to threat actors list	2018-09-18 11:27:32 +02:00
Alexandre Dulaunoy	fe60e58f5b	Merge pull request #262 from botherder/mythic-leopard ... Added additional name to C-Major	2018-09-18 11:25:58 +02:00
Nex	1e502a494e	Added additional name to C-Major	2018-09-18 11:18:42 +02:00
Nex	ee7f609397	Removed duplicates	2018-09-18 11:16:00 +02:00
Alexandre Dulaunoy	88c9d8d9f6	Merge pull request #259 from botherder/country-sync ... Synced country codes with suspected state sponsor	2018-09-17 18:18:00 +02:00
Nex	be0dd94c90	Synced country codes with suspected state sponsor	2018-09-17 16:26:14 +02:00
Nex	c2ea505459	Merged Transparent Tribe in C-Major	2018-09-17 16:11:18 +02:00
Deborah Servili	a73424139f	fix versions	2018-09-12 14:26:44 +02:00
Deborah Servili	f107563cad	add ref for operation Applejeus	2018-09-12 09:34:16 +02:00
Deborah Servili	c92dc15937	add Operation AppleJeus	2018-09-10 14:13:09 +02:00
Deborah Servili	40d5cca20f	clusters	2018-09-07 16:03:40 +02:00
Deborah Servili	f14dd27315	add cfr data	2018-08-27 15:29:16 +02:00
Deborah Servili	9efca2fd79	more clusters ... Signed-off-by: Deborah Servili <deborah.servili@gmail.com>	2018-08-24 16:11:16 +02:00
Deborah Servili	c943d1c9d1	add APT28/STRONTIUM refs	2018-08-22 09:59:40 +02:00
Alexandre Dulaunoy	cd76f19f52	chg: [threat-actor] APT-C-35 actor added ... ref: https://ti.360.net/blog/articles/latest-activity-of-apt-c-35/	2018-08-15 20:25:57 +02:00
Christophe Vandeplas	88162aa44e	chg: [mapping] Generated automatic mapping between clusters	2018-08-14 09:35:22 +02:00
Christophe Vandeplas	5478f0aa45	no change: dump files with sort_keys=True ... This is needed to keep better track of the changes when other tools load and save the json files.	2018-08-13 17:06:29 +02:00
Christophe Vandeplas	021107e597	fix: [threat-actor] added missing uuids	2018-08-13 17:00:40 +02:00
Alexandre Dulaunoy	6620b5575a	fix: [threat-actor] related is an array of JSON objects	2018-08-09 07:53:42 +02:00
Alexandre Dulaunoy	1429b60555	chg: [threat-actor] jq document	2018-08-08 16:38:39 +02:00
Deborah Servili	ebc7287e14	update schema	2018-08-08 16:12:29 +02:00
Deborah Servili	33a300b773	tags is an array	2018-08-08 15:59:44 +02:00
Deborah Servili	b857be9cab	relationship system - v2	2018-08-08 15:51:22 +02:00
Deborah Servili	050a864be0	update some clusters and try to add a relationship system	2018-08-08 14:20:38 +02:00
Deborah Servili	84adb50f0f	add RedAlpha campaigns	2018-08-07 13:55:05 +02:00
Deborah Servili	b7de06ffcc	delete forgotten conflict marker	2018-08-06 08:49:44 +02:00
Deborah Servili	010df0a2b6	resolve merge conflict	2018-08-06 08:48:21 +02:00
Deborah Servili	def23775e5	resolve merge conflict	2018-08-06 08:45:03 +02:00
Nils Kuhnert	ab49b58b02	Added DarkHydrus	2018-08-06 08:33:34 +02:00
Nils Kuhnert	4654f51889	Two small typos	2018-08-05 15:09:38 +02:00
Deborah Servili	e5b185deee	Merge branch 'master' into master	2018-08-03 16:11:16 +02:00
Deborah Servili	35aa8ba34e	delete duplicate gorgon group	2018-08-03 16:08:43 +02:00
Deborah Servili	a9a71ef84c	more clusters	2018-08-03 15:58:54 +02:00
Alexandre Dulaunoy	b3701b6b34	chg: [threat-actor] The Gordon Group added ... ref: https://researchcenter.paloaltonetworks.com/2018/08/unit42-gorgon-group-slithering-nation-state-cybercrime/	2018-08-03 10:26:52 +02:00
Alexandre Dulaunoy	3da005a3f3	fix: jq all the things(tm)	2018-08-02 15:15:47 +02:00
Alexandre Dulaunoy	1fdf47d509	fix: [threat-actor] synonyms are always arraus	2018-08-02 15:13:18 +02:00
Alexandre Dulaunoy	ece56dff38	chg: [threat-actor] leafminer - RASPITE added	2018-08-02 15:08:39 +02:00