1954 commits

Author	SHA1	Message	Date
Christophe Vandeplas	e2f2026fea	chg: [first-dns] Adds FIRST DNS Abuse Techniques Matrix	2023-02-21 10:26:46 +08:00
Christophe Vandeplas	a6a9a73ae5	chg: [360net] updated to latest online version	2023-02-20 20:03:36 +08:00
Alexandre Dulaunoy	6460fde2e4	chg: [threat-actor] version updated	2023-02-16 14:43:45 +01:00
Daniel Plohmann	91255413d8	adding Google names for RU threat actors ... https://blog.google/threat-analysis-group/fog-of-war-how-the-ukraine-conflict-transformed-the-cyber-threat-landscape/	2023-02-16 14:30:05 +01:00
Alexandre Dulaunoy	73bd7d0983	Merge pull request #818 from Mathieu4141/threat-actors/proofpoint-aliases ... [threat actors] Adding some actors from ProofPoint	2023-02-14 06:40:22 +01:00
Mathieu Beligon	9f09699047	[threat-actors] Fix: country was in the wrong place	2023-02-13 16:47:38 -08:00
Mathieu Beligon	ac067a236e	[threat-actors] fix: Add missing uuids	2023-02-13 16:36:41 -08:00
Mathieu Beligon	a792115dd8	fix	2023-02-13 16:26:10 -08:00
Mathieu Beligon	8193b05e14	[threat-actors] bump version	2023-02-13 14:18:58 -08:00
Mathieu Beligon	d34e894d2d	[threat-actors] Add TA2536	2023-02-13 13:45:41 -08:00
Mathieu Beligon	20c31a5d10	[threat-actors] Add TA577	2023-02-13 13:32:24 -08:00
Mathieu Beligon	e836a4a63c	[threat-actors] Add TA575	2023-02-13 12:02:32 -08:00
Mathieu Beligon	c52ac53765	[threat-actors] Add TA570	2023-02-13 11:54:47 -08:00
Mathieu Beligon	5f274f58c9	[threat-actors] Add Moskalvzapoe	2023-02-13 11:44:59 -08:00
Daniel Plohmann	62256854bc	adding Broadcom name for SaintBear.	2023-02-13 14:05:35 +01:00
Mathieu Beligon	33ff650327	[threat-actors] Add more information about NoName057(16)	2023-02-10 14:14:52 -08:00
Alexandre Dulaunoy	9645b9348b	chg: [tools] TgToxic added	2023-02-09 16:24:45 +01:00
Alexandre Dulaunoy	385826063b	chg: [sigma] updated to the latest version	2023-02-05 11:26:16 +01:00
Daniel Plohmann	9710e09e17	new APT29 name used by Recorded Future ... cf. https://go.recordedfuture.com/hubfs/reports/cta-2023-0127.pdf	2023-02-02 11:46:50 +01:00
Alexandre Dulaunoy	3d6ec1b187	chg: [sigma] updated to the latest version	2023-02-02 11:25:19 +01:00
Jürgen Löhel	cf492d9931	chg: [stealer] Adds Album Stealer ... Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>	2023-02-01 17:30:56 -06:00
Alexandre Dulaunoy	033895b052	Merge pull request #812 from jloehel/boldmove ... chg: [backdoor] Adds BOLDMOVE	2023-01-31 06:24:59 +01:00
Jürgen Löhel	c7c2b8441a	chg: [stealer] Removes BluStealer ... The BluStealer is already in the malpedia cluster. Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>	2023-01-30 18:35:28 -06:00
Jürgen Löhel	ca635cc3fc	chg: [stealer] Adds DarkCloud and BluStealer ... Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>	2023-01-30 18:29:25 -06:00
Jürgen Löhel	33513241bd	chg: [backdoor] Adds BOLDMOVE ... Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>	2023-01-30 16:39:11 -06:00
Alexandre Dulaunoy	150e3152cc	Merge pull request #809 from MISP/dev ... Updated the `region` cluster	2023-01-27 15:08:16 +01:00
Alexandre Dulaunoy	b7543c5012	Merge pull request #789 from Mathieu4141/threat-actors/fix-sectorj04 ... [threat-actors] Remove SectorJ04 duplicate	2023-01-27 15:05:37 +01:00
Mathieu Beligon	a452263ace	[threat-actors] pr.review: Add SectorJ04 as alias of TA505	2023-01-27 13:32:58 +01:00
Delta-Sierra	89bb349184	Merge https://github.com/MISP/misp-galaxy	2023-01-26 11:46:14 +01:00
Delta-Sierra	0bb1f48ad6	fix missing brackets	2023-01-25 14:47:22 +01:00
Christian Studer	e87d39e3f4	fix: [region] JQed all the things !!	2023-01-25 09:24:52 +01:00
Delta-Sierra	50ca40e408	add Anubis & Godfather android banking trojans	2023-01-25 09:05:19 +01:00
Christian Studer	51610df907	chg: [region] Updated the region Galaxy Cluster ... - Added missing entry (Antarctica) - Ordered the `subregions` meta field	2023-01-24 22:53:54 +01:00
ofenomeno	cb8d700e62	adding uavs	2023-01-24 19:55:46 +01:00
Alexandre Dulaunoy	2f0dfc7656	chg: [sigma] updated	2023-01-23 10:10:46 +01:00
Alexandre Dulaunoy	4a342354f9	chg: [sigma] updated	2023-01-20 13:58:11 +01:00
Christian Studer	5c21588d7c	add: [country] Manually added the missing relations to some country cluster values ... - The previous commit (071ecb8) that added the mahority of relations between countries and regions were automatically added based on the country names specified in the `region` cluster. The relations added here are the remaining countries that are not litterally defined the same way they are in the `region` cluster	2023-01-16 22:22:42 +01:00
Christian Studer	325f51479b	chg: [country] Clarified the US cluster value	2023-01-16 22:20:30 +01:00
Christian Studer	071ecb8a52	add: [country] Added references between country cluster values and the related region they're located in, from the region galaxy cluster	2023-01-16 21:35:22 +01:00
Alexandre Dulaunoy	323f9f47a1	chg: [sigma] version must be an integer	2023-01-12 16:45:21 +01:00
Alexandre Dulaunoy	fd226d47a2	chg: [sigma] new version of the cluster	2023-01-12 14:10:22 +01:00
Alexandre Dulaunoy	c0fdfb0e99	chg: [sigma] updated with latest version + new relationship script	2023-01-12 13:46:31 +01:00
Alexandre Dulaunoy	e54366fb87	chg: [threat-actor] added the missing synonyms	2023-01-10 15:55:30 +01:00
Alexandre Dulaunoy	187701bacb	chg: [sigma] regenerated from the test script (also updated the script ... to ensure UUID consistency for the galaxy)	2023-01-06 15:36:33 +01:00
Alexandre Dulaunoy	9955401791	chg: [sigma] jq all the things	2023-01-06 15:13:35 +01:00
Alexandre Dulaunoy	8539361df5	Merge branch 'main' of https://github.com/jstnk9/misp-galaxy into jstnk9-main	2023-01-06 15:11:27 +01:00
jstnk9	5bcec1d72f	Merge branch 'MISP:main' into main	2023-01-03 11:10:49 +01:00
Jürgen Löhel	d4debd619b	chg: [ransomware] Extends the entry for JCrypt ... * Add the reference to MafiaWare666 based on the latest research from the Avast Threat Lab: https://decoded.avast.io/threatresearch/decrypted-mafiaware666-ransomware/ * Add more infos from Andrew Ivanovs the great blog post: https://id-ransomware.blogspot.com/2020/12/jcrypt-ransomware.html Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>	2022-12-23 01:44:20 -06:00
Delta-Sierra	3f4edb480b	add Malteiro	2022-12-16 16:43:50 +01:00
jstnk9	cb19f6bda7	galaxy for sigma rules	2022-12-09 08:48:54 +01:00