[MontySecurity C2 Tracker] Add montysecurity C2-Tracker connector #3318
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
richard-julien
force-pushed
the
master
branch
2 times, most recently
from
9818df2 to
0f4b30d
Compare
helene-nguyen
changed the title
helene-nguyen
changed the title
|
fyi i have created a PR against this fork that fixes linting/formatting. |
SamuelHassine
force-pushed
the
master
branch
2 times, most recently
from
b513b96 to
11a05bf
Compare
helene-nguyen
requested changes
Feb 28, 2025
There was a problem hiding this comment.
@montysecurity Thank you for your contribution !!
Could you please ensure formatting and lint ?
You can run black . and isort --profile black . at the connector root folder
And could you please sign your commits to be verified with GPG ?
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Proposed changes
Checklist
Further comments
This commit contains a purge.py script that is not automatically used under any circumstance but may be useful to the operator in order to delete all IOCs from this IOC feed.
The Dockerfile uses harcoded values for they pycti and request library versions. The current version of pycti breaks a part of this connector so it has been backdated for the docker image.
The IOCs are pulled from https://github.com/montysecurity/C2-Tracker
Connector.py automatically prunes IOCs, uses labels to prevent interfering with other IOCs.
Contains functionality to link IOCs to entities created by the MITRE Connector. This functionality does not require extra setup by the operator.