Commit graph

149 commits

Author SHA1 Message Date
6f1b8344a5
chg: [adoc_galaxy] exclude firearms and ammunitions 2023-10-13 18:35:10 +02:00
Christophe Vandeplas
02c50184bf
chg: [attck4fraud] Full merge of E.A.S.T. data + updated script 2023-05-13 09:50:14 +02:00
Christophe Vandeplas
2d7b7137bf
new: [tools] gen E.A.S.T. galaxy tool - not functional 2023-05-07 21:16:08 +02:00
Christophe Vandeplas
fd44ebaee0
fix: [tool] minor cosmetic fix 2023-04-23 16:31:31 +02:00
Christophe Vandeplas
568e6a7507
fix: [tool] minor cosmetic fix 2023-04-23 15:00:57 +02:00
Christophe Vandeplas
7d98ac013c
chg: [tool] gen_relationships is now interactive 2023-04-23 14:59:26 +02:00
Christophe Vandeplas
bea5fda2ab
new: [tool] Initial version of a Relationship generator. 2023-04-23 13:23:23 +02:00
Christophe Vandeplas
e056a9ea0c
fix: [tools] 360net cosmetic fix 2023-04-23 10:19:48 +02:00
2763cdd72b
chg:[sigma] Sigma rules updated 2023-04-12 11:44:43 +02:00
Tom King
e52eefa0e7 chg: [mitre] updated with correct ID parsing 2023-02-21 10:36:37 +00:00
Christophe Vandeplas
a6a9a73ae5 chg: [360net] updated to latest online version 2023-02-20 20:03:36 +08:00
57871ee05d
add: [region] Added script to update the region cluster based on the UNSD M49 csv file 2023-01-24 22:49:14 +01:00
f605f041d9
fix: [tools] Added missing closing ' 2023-01-24 01:21:54 +01:00
997e570ad2
fix: [sigma] version must be an int 2023-01-13 16:38:56 +01:00
5804065e16
chg: [tools] sigma tools updated 2023-01-12 14:16:20 +01:00
1c8880b3bb
new: [tools] Sigma export tool added based on https://github.com/jstnk9/MISP/pull/1 2023-01-06 16:00:37 +01:00
Andras Iklody
13dbf70d77
fix: [att&ck converter] allow multiple external IDs
- There are in some cases external ID references to CAPEC in addition to ATT&CK in techniques
- convert external ID to a list rather than a single string

- as reported by @SYNchroACK
- as hurried along by a disappointed @deresz
2022-11-28 12:25:25 +01:00
Christophe Vandeplas
7b3670c4ee chg: [tool] make mitre script easier to find 2022-09-27 07:28:00 +02:00
eacab6ca27
new: [malpedia] remove duplicate UUIDs objects (coming from Malpedia API) 2022-09-26 10:58:09 +02:00
Christophe Vandeplas
0609974545 fix: [atrm] fix bug in authors 2022-09-23 15:39:49 +02:00
Christophe Vandeplas
b011ddee5b fix: [360net] fixes null entries in lists 2022-09-13 22:12:51 +02:00
Christophe Vandeplas
c5a5fa7cfa chg: [360net] add 360.net APT list fixes #764 2022-09-13 21:48:16 +02:00
Christophe Vandeplas
1369756810 chg: [atrm] Add Azure Threat Research Matrix Galaxy and generation script 2022-08-06 21:19:31 +02:00
marjatech
587dc8560b add script to automate malpedia update 2022-07-04 14:24:34 +02:00
Christophe Vandeplas
4a469299fd [mitre] update sorting algo
will make future ATT&CK updates less noisy in the git diff
2022-05-25 21:00:57 +02:00
c673360afa
chg: [tools] add skip list in index generation (to focus on intelligence/cyber) 2022-04-04 11:21:46 +02:00
21478c0d8d
chg: [adoc] updated with the non-cyber releated lists 2022-04-04 11:17:40 +02:00
2d8eff9de9
chg: [tools] adoc export now includes a skip list 2022-03-25 10:12:48 +01:00
2c586d2f96
chg: [tools] updated for the new website 2022-02-01 11:05:25 +01:00
a0804c1194
fix: [tools] Generate index Markdown layout updated 2022-01-07 16:55:29 +01:00
d51eecdab8
new: [tools] Generate markdown index 2022-01-07 12:55:50 +01:00
adb467743e
chg: [tools] add a reference to the relationship graph 2022-01-06 19:01:40 +01:00
Christophe Vandeplas
aeb5719448 chg: [att&ck] update to ATT&CK v10 2021-10-22 14:34:25 +02:00
0ccbdb862b
chg: [tea] first version 2020-10-23 11:16:50 +02:00
Christophe Vandeplas
2334676e64 chg: [att&ck] no tag for subtechnique 2020-10-18 20:14:05 +02:00
VVX7
5e54fc2022 chg: [dev] gen_defence_university.py no longer outputs empty strings, lists 2020-08-22 13:01:20 -04:00
VVX7
b4c3ffc8eb new: [dev] add ASPI's China Defence University Tracker.
Thanks to Cormac Doherty for writing the web scraper! To update the galaxy run the included gen_defence_university.py script.

"The China Defence Universities Tracker is a database of Chinese institutions engaged in military or security-related science and technology research. It was created by ASPI’s International Cyber Policy Centre.

It includes entries on nearly 100 civilian universities, 50 People’s Liberation Army institutions, China’s nuclear weapons program, three Ministry of State Security institutions, four Ministry of Public Security universities, and 12 state-owned defence industry conglomerates.

The Tracker is a tool to inform universities, governments and scholars as they engage with the entities from the People’s Republic of China. It aims to build understanding of the expansion of military-civil fusion—the Chinese government’s policy of integrating military and civilian efforts—into the education sector.

The Tracker should be used to inform due diligence of Chinese institutions. However, the fact that an institution is not included here does not indicate that it should not raise risks or is not involved in defence research. Similarly, entries in the database may not reflect the full range and nature of an institution’s defence and security links." - ASPI (https://unitracker.aspi.org.au/about/)
2020-08-21 11:24:22 -04:00
Christophe Vandeplas
d32022b241 fix: [attack] fixes old MITRE relationships not being removed 2019-10-27 21:06:26 +01:00
Christophe Vandeplas
76668d0ebb fix: [adoc] ignore deprecated galaxies 2019-10-27 18:35:44 +01:00
Christophe Vandeplas
4ab9bbbfa3 chg: [attack] update to latest ATT&CK data 2019-10-25 10:12:41 +02:00
Christophe Vandeplas
eb594cba0f fix: [misinfosec] fixes inconsistent filename 2019-10-20 18:53:02 +02:00
VVX7
e4998efec9 chg: [galaxy] added AMITT galaxy/cluster generator script 2019-10-08 13:52:08 -04:00
Deborah Servili
5c35bd01de
try to please CodeFactor 2019-09-26 14:43:25 +02:00
Deborah Servili
1ea212612a
add script used to create region galaxy (Not optimised or anything) 2019-09-26 13:27:31 +02:00
Sebastian Wagner
c93103bba1
Add test for empty strings
Should prevent MISP/misp-galaxy#438
2019-08-30 10:08:16 +02:00
6e19d21d3a
chg: [tools] fix the attribution confidence level 2019-03-19 16:49:19 +01:00
Deborah Servili
ecf76178e7
add attribution-confidence attribute to threat-actor 2019-03-11 11:18:12 +01:00
Christophe Vandeplas
db2dbc7cb6 fix: [tool] MITRE conversion script 2018-12-09 09:14:56 +01:00
Christophe Vandeplas
bdfefb4499 MITRE galaxy - initial conversion and migration script
this is not fully working yet !
2018-12-09 08:09:53 +01:00
Christophe Vandeplas
bd1f22ad7d pep8, include the misp-galaxy tag in the output 2018-12-02 11:35:49 +01:00
ca1bc24f65
fix: [graph.py] small fix to make it work 2018-10-19 14:59:09 +02:00
Christophe Vandeplas
bceee0f03d tool: experimental graphing tool 2018-10-19 14:30:05 +02:00
Christophe Vandeplas
1e90cac717 fix: intrusion is an actor and not a tool 2018-10-17 18:17:33 +02:00
Christophe Vandeplas
c51ba2e868 chg: MITRE relationships included in the respective cluster. 2018-10-17 08:08:58 +02:00
Christophe Vandeplas
c49b3242a5 chg: mappings are now in the generated adoc
plus massive performance improvement
2018-10-16 16:19:16 +02:00
Christophe Vandeplas
f14d616e22 chg: magical mapping with malpedia 2018-10-12 11:00:00 +02:00
Christophe Vandeplas
65eb66a739 fix: automatically fix missing uuids 2018-10-12 10:55:24 +02:00
Davide Arcuri
253fbed356 Added Malpedia Galaxy
based on malpedia git repo

Co-Authored-By: garanews <garanews@users.noreply.github.com>
2018-10-05 14:30:31 +02:00
Christophe Vandeplas
4d232c56e0 cosmetic change 2018-08-14 09:38:38 +02:00
Christophe Vandeplas
88162aa44e chg: [mapping] Generated automatic mapping between clusters 2018-08-14 09:35:22 +02:00
bee6edc6a8
fix: cleanup the link generation based on type instead of title (Thanks
to Juan Rocha for the report)
2018-06-22 12:56:26 +02:00
Deborah Servili
2896deff13 fix typo in pre-attack-relationship script - thanks @Terrtia 2018-05-28 13:53:26 +02:00
2f99eb4e3f
add: mitre-attack namespace for all the ATT&CK galaxies 2018-05-20 09:36:35 +02:00
Deborah Servili
d82a76c08f fix scripts for nobile and pre attack attack pattern 2018-05-19 13:09:30 +02:00
Deborah Servili
730353f63d update mitre galaxies - add external id and killchain 2018-05-19 12:56:20 +02:00
Deborah Servili
4c07e583fe update mitre 2.0 scripts to add external_id in meta (still need to be tested) 2018-05-18 16:15:26 +02:00
Deborah Servili
804fcedb5c add external_id to values 2018-04-03 15:53:17 +02:00
StefanKelm
190efe7497
Update create_mitre-enterprise-attack-tool_galaxy.py 2018-03-22 14:20:59 +01:00
StefanKelm
9f98a475fd
Update create_mitre-enterprise-attack-relationship_galaxy.py 2018-03-22 14:20:11 +01:00
StefanKelm
24c4ecf87c
Update create_mitre-enterprise-attack-malware_galaxy.py 2018-03-22 14:19:08 +01:00
StefanKelm
00257d04fa
Update create_mitre-enterprise-attack-intrusion-set_galaxy.py 2018-03-22 14:17:50 +01:00
StefanKelm
165c33410d
Update create_mitre-enterprise-attack-course-of-action_galaxy.py 2018-03-22 14:16:06 +01:00
StefanKelm
a600aae010
Update create_mitre-enterprise-attack-attack-pattern_galaxy.py 2018-03-22 14:15:06 +01:00
Deborah Servili
c5ed4cb457 modify argument in add_missing_uuid script 2018-02-28 16:19:16 +01:00
Deborah Servili
d88a4a44dc add uuid to every cluster 2018-02-28 15:37:37 +01:00
Deborah Servili
dd62ea1844 manage duplicate refs - first try 2018-02-23 11:44:17 +01:00
Deborah Servili
48a65e15a6 fix empty meta field 2018-02-23 08:37:15 +01:00
Deborah Servili
4ddb598de4 add MITRE Galaxies V2.0 2018-02-21 16:28:11 +01:00
db2b187bc6
Merge branch 'master' of https://github.com/Kafeine/misp-galaxy into Kafeine-master 2018-02-14 11:06:19 +01:00
b4c083d325
fix: dedication page (CEF) and update overall structure of the document generated 2017-11-04 12:51:20 +01:00
Deborah Servili
3a41799542 add galaxy icon to mitre-cti tools & regenerate galaxies 2017-10-26 10:28:05 +02:00
Deborah Servili
fa8c4ec839 delete x_ prefix from mitre_attack_pattern 2017-10-26 09:44:23 +02:00
Deborah Servili
dd571d7cd5 script mitre - version given as an input + renaming 2017-08-17 15:52:26 +02:00
Deborah Servili
ee794b8ab1 Fixed some issues with a misnamed galaxy - script 2017-08-17 08:11:41 +02:00
1e1bbfdd96 Merge pull request #80 from Delta-Sierra/master
add mitre based galaxies
2017-08-16 15:51:48 +02:00
Deborah Servili
7e391e8a39 version is integer 2017-08-16 15:23:58 +02:00
Deborah Servili
7cb372bdb5 put uuid as meta 2017-08-16 15:13:18 +02:00
Deborah Servili
06cfebc92f fix mitre-cti script - replace 'name' by 'value' 2017-08-16 12:32:34 +02:00
0be0f2ff28
asciidoctor-pdf is now stable 2017-08-16 12:29:17 +02:00
27609fe29a Documentation generator added 2017-08-16 12:02:23 +02:00
Deborah Servili
2e02c40a7e add scripts to create galaxy from https://github.com/mitre/cti/tree/master/ATTACK - still under testing 2017-08-16 11:22:20 +02:00
def85a5dbb Fixed the double trailing dot. 2017-05-06 16:02:00 +02:00
d5b6cfbe7c Add meaningful infobox 2017-05-05 23:15:49 +02:00
9a5f8a3bfc a tool to convert MISP Galaxy Cluster into an asciidoctor document 2017-05-05 23:06:11 +02:00
Thanat0s
5c0feb1b1a add tool to find duplicate 2017-02-26 02:53:06 +01:00
Déborah Servili
d6cab37977 change author name to 'Various' 2017-01-31 09:11:26 +01:00
Déborah Servili
bc05a2aeee improve csv_to_galaxy 2 2017-01-30 14:53:08 +01:00
Déborah Servili
5b68ec56db improve csv_to_galaxy 2017-01-30 14:41:47 +01:00
Déborah Servili
7460910673 add csv to galaxy converter 2017-01-27 16:28:06 +01:00