2372 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Alexandre Dulaunoy	a0b65dd42c	Merge pull request #670 from jloehel/darkwatchman ... Adds DarkWatchman RAT	2021-12-17 15:24:00 +01:00
Jürgen Löhel	b81ac7f01d	Adds DarkWatchman RAT ... Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>	2021-12-17 07:20:58 -06:00
Alexandre Dulaunoy	f98996bfc6	Merge pull request #669 from Delta-Sierra/main ... add ESPecter Bootkit	2021-11-19 16:35:02 +01:00
Delta-Sierra	78a8cf4ad2	add ESPecter Bootkit	2021-11-19 16:30:57 +01:00
Delta-Sierra	c89623e945	add ESPecter bootkit	2021-11-16 08:17:37 +01:00
Christophe Vandeplas	aeb5719448	chg: [att&ck] update to ATT&CK v10	2021-10-22 14:34:25 +02:00
Alexandre Dulaunoy	ab41df7282	chg: [malpedia] remove duplicate	2021-10-20 12:24:12 +02:00
Alexandre Dulaunoy	e517787e7c	chg: [malpedia] duplicates removed	2021-10-20 12:21:05 +02:00
Alexandre Dulaunoy	69f878c86f	fix: [malpedia] remove duplicate urls	2021-10-20 12:16:22 +02:00
Alexandre Dulaunoy	87f9b0d029	Merge branch 'marjatech-main' into main	2021-10-20 10:23:25 +02:00
Alexandre Dulaunoy	da91f2abc2	chg: [malpedia] updated	2021-10-20 10:21:03 +02:00
marjatech	d74fdb3e43	update malpedia	2021-10-19 16:21:19 +02:00
Alexandre Dulaunoy	20f14c0090	Merge pull request #666 from Wachizungu/add-common-raven ... Add threat actor common raven	2021-10-04 17:45:17 +02:00
Jeroen Pinoy	9ec76ae185	Add threat actor common raven	2021-10-03 23:30:20 +02:00
Alexandre Dulaunoy	fccefddc48	Merge pull request #665 from thomaspatzke/main ... Added O365 techniques	2021-09-18 23:40:37 +02:00
Thomas Patzke	26f0c344a1	Added O365 techniques ... Source: https://www.inversecos.com/2021/09/office365-attacks-bypassing-mfa.html	2021-09-18 23:27:38 +02:00
Alexandre Dulaunoy	6b279d3b33	Merge pull request #664 from nyx0/main ... Adding TA and Tool	2021-08-27 11:01:31 +02:00
Thomas Dupuy	1985de4d44	Add BLUELIGHT tool.	2021-08-27 10:28:06 +02:00
Thomas Dupuy	89a3f986ba	Add InkySquid synonym.	2021-08-24 16:29:34 +02:00
Alexandre Dulaunoy	60cc6dd536	Merge pull request #663 from danielplohmann/patch-10 ... fixed typo in actor name (CLOCKWORD -> CLOCKWORK SPIDER)	2021-08-19 06:36:43 +02:00
Daniel Plohmann	3272960a14	fixed typo in actor name (CLOCKWORD -> CLOCKWORK SPIDER)	2021-08-19 06:02:40 +02:00
Alexandre Dulaunoy	959b919dc6	Merge pull request #662 from r0ny123/patch-1 ... Add origin country to UNC2452 & HAFNIUM	2021-08-04 08:17:09 +02:00
Rony	5dd0c7d8b3	chg: [threat-actor] add origin country to UNC2452 & HAFNIUM ... addressed https://github.com/MISP/misp-galaxy/pull/660#issuecomment-884475015	2021-08-02 22:30:05 +05:30
Alexandre Dulaunoy	8f0a1642e0	Merge pull request #660 from r0ny123/patch-1 ... References for APT40, APT31 & HAFNIUM	2021-07-21 22:19:53 +02:00
Rony	636ccdedcd	Update threat-actor.json	2021-07-21 18:47:56 +05:30
Rony	9ecfecc063	another fix	2021-07-21 18:41:18 +05:30
Rony	32ea60d721	fix	2021-07-21 18:31:05 +05:30
Rony	52e7d5a0a9	multiple updates to apt40, apt31 & hafnium	2021-07-21 18:28:40 +05:30
Rony	fb9a41f8e9	from Gov Canada & MFA Japan	2021-07-19 20:33:35 +05:30
Rony	c90c60cb13	adding references for APT40 & APT31	2021-07-19 20:14:36 +05:30
Alexandre Dulaunoy	6c8949caa9	Merge pull request #658 from jasperla/oilrig ... merge APT34 with OilRig	2021-07-03 08:56:39 +02:00
Alexandre Dulaunoy	6d6776316e	Merge pull request #659 from Delta-Sierra/master ... Add NOBELIUM and related	2021-07-02 14:14:42 +02:00
Deborah Servili	b6005bd53f	Merge branch 'main' into master	2021-07-02 13:30:51 +02:00
Delta-Sierra	913aff30c3	Add NOBELIUM and related	2021-07-02 13:18:03 +02:00
Jasper Lievisse Adriaanse	792490298e	merge APT34 with OilRig ... OilRig already has "APT 34" and "APT34" as synonyms. Additionally MITRE has since combined them due to overlap in activity: https://attack.mitre.org/groups/G0049/	2021-06-29 20:26:04 +02:00
Alexandre Dulaunoy	a5d7d85dc8	Merge pull request #657 from jloehel/add_matanbuchus ... [cluster][tool] Adds Matanbuchus	2021-06-22 07:23:20 +02:00
Alexandre Dulaunoy	7a5218cc1c	Merge pull request #656 from jloehel/add_hackboss ... [cluster][stealer] Adds HackBoss	2021-06-22 07:22:18 +02:00
Jürgen Löhel	254c201601	[cluster][tool] Adds Matanbuchus ... + threat actor: BelialDemon Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>	2021-06-21 18:04:28 -05:00
Jürgen Löhel	381973f5de	[cluster][stealer] Adds HackBoss ... Fixes: #651 Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>	2021-06-21 16:35:20 -05:00
Delta-Sierra	97976ba2e8	Merge https://github.com/MISP/misp-galaxy	2021-06-21 14:08:56 +02:00
Alexandre Dulaunoy	141b85c084	Merge pull request #654 from nyx0/main ... Added BackdoorDiplomacy and Gelsemium.	2021-06-11 21:03:37 +02:00
Thomas Dupuy	772c5145c1	Added BackdoorDiplomacy and Gelsemium.	2021-06-11 11:48:57 -04:00
Alexandre Dulaunoy	4293503231	Merge pull request #653 from r0ny123/cybercrime ... Adding CyberCrime actor profiles from Crowdstrike & Secureworks	2021-05-26 21:57:47 +02:00
Rony	9a723b6261	more ta544 references	2021-05-26 20:26:27 +05:30
Rony	db06e1fa4a	chg: [threat-actor] added cybercrime threat group profiles from Crowdstrike & Secureworks	2021-05-22 21:02:30 +05:30
Alexandre Dulaunoy	a6d51e2247	Merge pull request #652 from danielplohmann/patch-9 ... adding Twisted Spider as alias for TA2101 (Maze)	2021-05-19 17:21:38 +02:00
Daniel Plohmann	433ea5cb45	Twisted Spider -> TWISTED SPIDER ... fair point	2021-05-19 17:04:58 +02:00
Daniel Plohmann	9719122d27	adding Twisted Spider as alias for TA2101 (Maze)	2021-05-19 16:47:41 +02:00
Alexandre Dulaunoy	a3cdbc1309	Merge pull request #650 from Still34/patches/alias-tick-1 ... Add alias for Tick	2021-05-07 23:23:38 +02:00
Alexandre Dulaunoy	d4cfa4c0cd	Merge pull request #649 from Still34/patches/country-blacktech-1 ... Add country origin for BlackTech	2021-05-07 23:22:13 +02:00