Mathieu Beligon
e836a4a63c
[threat-actors] Add TA575
2023-02-13 12:02:32 -08:00
Mathieu Beligon
c52ac53765
[threat-actors] Add TA570
2023-02-13 11:54:47 -08:00
Mathieu Beligon
5f274f58c9
[threat-actors] Add Moskalvzapoe
2023-02-13 11:44:59 -08:00
Daniel Plohmann
62256854bc
adding Broadcom name for SaintBear.
2023-02-13 14:05:35 +01:00
f6c83d3bfc
Merge pull request #816 from Mathieu4141/threat-actors/noname057-aliases
...
[threat-actors] Add more information about NoName057(16)
2023-02-12 13:23:24 +01:00
Mathieu Beligon
33ff650327
[threat-actors] Add more information about NoName057(16)
2023-02-10 14:14:52 -08:00
9645b9348b
chg: [tools] TgToxic added
2023-02-09 16:24:45 +01:00
o1mate
239883e2a9
Merging the handguns and shotguns clusters into a single firearm cluster.
2023-02-06 03:28:49 -05:00
385826063b
chg: [sigma] updated to the latest version
2023-02-05 11:26:16 +01:00
bb965e67bd
Merge pull request #815 from danielplohmann/patch-27
...
new APT29 name used by Recorded Future
2023-02-02 15:15:29 +01:00
Daniel Plohmann
9710e09e17
new APT29 name used by Recorded Future
...
cf. https://go.recordedfuture.com/hubfs/reports/cta-2023-0127.pdf
2023-02-02 11:46:50 +01:00
3d6ec1b187
chg: [sigma] updated to the latest version
2023-02-02 11:25:19 +01:00
80be580f3c
Merge pull request #814 from jloehel/album
...
chg: [stealer] Adds Album Stealer
2023-02-02 06:39:40 +01:00
Jürgen Löhel
cf492d9931
chg: [stealer] Adds Album Stealer
...
Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
2023-02-01 17:30:56 -06:00
033895b052
Merge pull request #812 from jloehel/boldmove
...
chg: [backdoor] Adds BOLDMOVE
2023-01-31 06:24:59 +01:00
f509c45d74
Merge pull request #813 from jloehel/darkcloud
...
chg: [stealer] Adds DarkCloud
2023-01-31 06:24:24 +01:00
Jürgen Löhel
c7c2b8441a
chg: [stealer] Removes BluStealer
...
The BluStealer is already in the malpedia cluster.
Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
2023-01-30 18:35:28 -06:00
Jürgen Löhel
ca635cc3fc
chg: [stealer] Adds DarkCloud and BluStealer
...
Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
2023-01-30 18:29:25 -06:00
Jürgen Löhel
33513241bd
chg: [backdoor] Adds BOLDMOVE
...
Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
2023-01-30 16:39:11 -06:00
150e3152cc
Merge pull request #809 from MISP/dev
...
Updated the `region` cluster
2023-01-27 15:08:16 +01:00
b7543c5012
Merge pull request #789 from Mathieu4141/threat-actors/fix-sectorj04
...
[threat-actors] Remove SectorJ04 duplicate
2023-01-27 15:05:37 +01:00
Mathieu Beligon
a452263ace
[threat-actors] pr.review: Add SectorJ04 as alias of TA505
2023-01-27 13:32:58 +01:00
06f250ef7c
Merge pull request #810 from Delta-Sierra/main
...
add Anubis & Godfather android banking trojans
2023-01-26 15:03:41 +01:00
o1mate
0b661d4f80
Added two new galaxies : An ammunition galaxy containing a list of known sold ammunitions ordered by brands, and a firearm galaxy containing two clusters (handguns, shotguns) scrapped from a famous vendor and ordered by model name (Format : Model name - SKU).
2023-01-26 08:34:38 -05:00
Delta-Sierra
89bb349184
Merge https://github.com/MISP/misp-galaxy
2023-01-26 11:46:14 +01:00
Delta-Sierra
0bb1f48ad6
fix missing brackets
2023-01-25 14:47:22 +01:00
cba41818fb
Merge pull request #808 from 0xOFenomeno/uavs-final
...
Adding UAVs' galaxy and related cluster
2023-01-25 10:12:27 +01:00
e87d39e3f4
fix: [region] JQed all the things !!
2023-01-25 09:24:52 +01:00
Delta-Sierra
50ca40e408
add Anubis & Godfather android banking trojans
2023-01-25 09:05:19 +01:00
51610df907
chg: [region] Updated the region
Galaxy Cluster
...
- Added missing entry (Antarctica)
- Ordered the `subregions` meta field
2023-01-24 22:53:54 +01:00
57871ee05d
add: [region] Added script to update the region
cluster based on the UNSD M49 csv file
2023-01-24 22:49:14 +01:00
ofenomeno
cb8d700e62
adding uavs
2023-01-24 19:55:46 +01:00
f605f041d9
fix: [tools] Added missing closing '
2023-01-24 01:21:54 +01:00
826c5ac4d9
Merge branch 'main' of github.com:MISP/misp-galaxy
2023-01-24 01:20:53 +01:00
2f0dfc7656
chg: [sigma] updated
2023-01-23 10:10:46 +01:00
4a342354f9
chg: [sigma] updated
2023-01-20 13:58:11 +01:00
5c21588d7c
add: [country] Manually added the missing relations to some country
cluster values
...
- The previous commit (071ecb8
) that added the
mahority of relations between countries and
regions were automatically added based on the
country names specified in the `region` cluster.
The relations added here are the remaining
countries that are not litterally defined the
same way they are in the `region` cluster
2023-01-16 22:22:42 +01:00
325f51479b
chg: [country] Clarified the US cluster value
2023-01-16 22:20:30 +01:00
071ecb8a52
add: [country] Added references between country
cluster values and the related region they're located in, from the region
galaxy cluster
2023-01-16 21:35:22 +01:00
1402b7aba6
Merge branch 'main' of github.com:MISP/misp-galaxy
2023-01-16 13:34:03 +01:00
997e570ad2
fix: [sigma] version must be an int
2023-01-13 16:38:56 +01:00
323f9f47a1
chg: [sigma] version must be an integer
2023-01-12 16:45:21 +01:00
5804065e16
chg: [tools] sigma tools updated
2023-01-12 14:16:20 +01:00
fd226d47a2
chg: [sigma] new version of the cluster
2023-01-12 14:10:22 +01:00
c0fdfb0e99
chg: [sigma] updated with latest version + new relationship script
2023-01-12 13:46:31 +01:00
e54366fb87
chg: [threat-actor] added the missing synonyms
2023-01-10 15:55:30 +01:00
1c8880b3bb
new: [tools] Sigma export tool added based on https://github.com/jstnk9/MISP/pull/1
2023-01-06 16:00:37 +01:00
187701bacb
chg: [sigma] regenerated from the test script (also updated the script
...
to ensure UUID consistency for the galaxy)
2023-01-06 15:36:33 +01:00
9b9287676d
Merge branch 'jstnk9-main' into main
2023-01-06 15:14:18 +01:00
9955401791
chg: [sigma] jq all the things
2023-01-06 15:13:35 +01:00