Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Adding CERT-Bund analyzers (WIP, untested) #41

Closed
wants to merge 4 commits into from
Closed

Adding CERT-Bund analyzers (WIP, untested) #41

wants to merge 4 commits into from

Conversation

3c7
Copy link
Contributor

@3c7 3c7 commented Apr 19, 2017

The promised PR. 🎉

Analyzers are tested with cortexutils, but not as a whole with this repo. Hope I didn't broke something.

@saadkadhi saadkadhi added the scope:analyzer Issue is analyzer related label Apr 21, 2017
@saadkadhi
Copy link
Contributor

@jeromeleonard can you please review @3c7 PR as soon as possible and accept it if everything is OK? I've added @nadouani as a reviewer as well for the template part/display in Cortex's UI.

Thanks!

jeromeleonard added a commit that referenced this pull request Apr 26, 2017
@jeromeleonard
#41 add summary
8f252b3
jeromeleonard added a commit that referenced this pull request Apr 26, 2017
@jeromeleonard
#41 update short report
a793142
jeromeleonard added a commit that referenced this pull request Apr 26, 2017
@jeromeleonard
#41 update short report
d2f6cf4
jeromeleonard added a commit that referenced this pull request Apr 26, 2017
@jeromeleonard
#41 change summary() to get interesting information only
e37b412
jeromeleonard added a commit that referenced this pull request Apr 26, 2017
@jeromeleonard
#41 revert change
717979c
jeromeleonard added a commit that referenced this pull request Apr 26, 2017
@jeromeleonard
#41 updated short report to work with the new summary
4f6a6a5
jeromeleonard added a commit that referenced this pull request Apr 29, 2017
@jeromeleonard
#41 remove Typing stuff related to python3.5+ to preserve compatibili…
47460be 
…ty w/ python2.7
jeromeleonard added a commit that referenced this pull request Apr 29, 2017
@jeromeleonard
#41 replaced long report w/ a table
8a98980
jeromeleonard added a commit that referenced this pull request Apr 29, 2017
@jeromeleonard
#41 update short report with a taxnomie
7a11193
jeromeleonard added a commit that referenced this pull request Apr 29, 2017
@jeromeleonard
#41 add summary
a5a5e1d
jeromeleonard added a commit that referenced this pull request May 3, 2017
@jeromeleonard
#41 add licence in GoogleSafebrowsing
6fc7de9
jeromeleonard added a commit that referenced this pull request May 3, 2017
@jeromeleonard
#41 add licence
7005691
jeromeleonard added a commit that referenced this pull request May 5, 2017
@jeromeleonard
#41 simplified short report
c1aee12
jeromeleonard added a commit that referenced this pull request May 5, 2017
@jeromeleonard
#41 added and changed summary() function, update short reports templa…
191341d 
…tes to use a taxonomie, remove Typing stuff related to python3.5+ to preserve compatibility w/ python2.7, add license info, update CirclPassiveDNS long report with a table
jeromeleonard added a commit that referenced this pull request May 7, 2017
@jeromeleonard
#41 update Circl PassiveSSL report templates
1e67f21
jeromeleonard added a commit that referenced this pull request May 7, 2017
@jeromeleonard
#41 manage error in Yara long report templates
8844e1b
jeromeleonard added a commit that referenced this pull request May 7, 2017
@jeromeleonard
#41 manage error in virusshare long report templates
7cbb8af
@3c7
Copy link
Contributor Author

3c7 commented May 12, 2017

VMRay analyzer waits now for analysis completion.

jeromeleonard added a commit that referenced this pull request May 22, 2017
@jeromeleonard
#41 add VMray files from PR41
a7c948e
jeromeleonard added a commit that referenced this pull request May 22, 2017
@jeromeleonard
#41 #16 dont send file to VMRay if TLP>GREEN
0eda02b
jeromeleonard added a commit that referenced this pull request May 22, 2017
@jeromeleonard
#41 #16 add check TLP in config, mainly for VMRay cloud
181ba77
jeromeleonard added a commit that referenced this pull request May 22, 2017
@jeromeleonard
#41 #16 add severity and reputation in short reports
e0c6939
jeromeleonard added a commit that referenced this pull request May 22, 2017
@jeromeleonard
#41 #16 fix error using wrong dict in short report
e7afcde
jeromeleonard added a commit that referenced this pull request May 22, 2017
@jeromeleonard
#41 #31 import FireholBlocklists from PR41
356c03d
jeromeleonard added a commit that referenced this pull request May 22, 2017
@jeromeleonard
#41 #16 fix severity issue
880c1a6
jeromeleonard added a commit that referenced this pull request May 22, 2017
@jeromeleonard
#41 #31 add license
892522b
jeromeleonard added a commit that referenced this pull request May 22, 2017
@jeromeleonard
#41 #16 fix review typo
0fd5814
jeromeleonard added a commit that referenced this pull request May 22, 2017
@jeromeleonard
#41 #31 add file_date in reports
cdae768
jeromeleonard added a commit that referenced this pull request May 22, 2017
@jeromeleonard
#41 #31 fix typo and update long report to a table with list name and…
f8bc24f 
… last update
jeromeleonard added a commit that referenced this pull request May 22, 2017
@jeromeleonard
#41 #31 change to v1.0
0a51a13
jeromeleonard added a commit that referenced this pull request May 22, 2017
@jeromeleonard
#41 #31 add check tlp info
bc121de
jeromeleonard added a commit that referenced this pull request May 22, 2017
@jeromeleonard
#41 #31 update with number of matching list
cd9a6fc
@3c7
Copy link
Contributor Author

3c7 commented May 22, 2017

Fixed ignoring older lists.

@jeromeleonard jeromeleonard changed the base branch from develop to 3c7-feature/bsi_analyzers May 22, 2017 19:26
jeromeleonard added a commit that referenced this pull request May 22, 2017
@jeromeleonard
#41 applied @3c7 fix : Fixed ignoring old lists. Removed test.
3fad29e
@3c7
Copy link
Contributor Author

3c7 commented May 31, 2017

@jeromeleonard Updated the pdns analyzer

@jeromeleonard jeromeleonard added this to the 1.5.0 milestone Jun 8, 2017
jeromeleonard added a commit that referenced this pull request Jun 8, 2017
@jeromeleonard
#41 replaces previous version of MISP, update config with check_tlp a…
0b97d78 
…nd max_tlp, and complete dataTypeList
jeromeleonard added a commit that referenced this pull request Jun 8, 2017
@jeromeleonard
#41 add functions to strip a misp event to output only relevant data
10a45b5
jeromeleonard added a commit that referenced this pull request Jun 8, 2017
@jeromeleonard
#41 change summary() to output only number of unique events in report
a84f4ab
jeromeleonard added a commit that referenced this pull request Jun 8, 2017
@jeromeleonard
#41 update short report to only view number of unique events found in…
2a980ca 
… all MISP servers
jeromeleonard added a commit that referenced this pull request Jun 8, 2017
@jeromeleonard
#41 update long report to know the source org of each event and keep …
9450725 
…tags and its color from MISP
jeromeleonard added a commit that referenced this pull request Jun 8, 2017
@jeromeleonard
#41 #13 update dataTypeList replaced url with fqdn
dacdbec
jeromeleonard added a commit that referenced this pull request Jun 8, 2017
@jeromeleonard
#41 #13 make it work also with python 2.7
071bb5a
jeromeleonard added a commit that referenced this pull request Jun 8, 2017
@jeromeleonard
#41 #13 add cortexutils
2d07b78
jeromeleonard added a commit that referenced this pull request Jun 8, 2017
@jeromeleonard
#41 #13 make it work with python 2.7 and add modifications from Nils …
3e2c18c 
…Kuhnert
jeromeleonard added a commit that referenced this pull request Jun 8, 2017
@jeromeleonard
#41 #13 use a table to read reports
08fcfaf
jeromeleonard added a commit that referenced this pull request Jun 8, 2017
@jeromeleonard
#41 #13 use a taxonomie
a6c53fc
jeromeleonard added a commit that referenced this pull request Jun 8, 2017
@jeromeleonard
#41 remove old misp analyzer
d8a83a5
@nadouani nadouani closed this Jun 14, 2017
jeromeleonard added a commit that referenced this pull request Jun 27, 2017
@jeromeleonard
#41 fix typo in filename
0741221
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@jeromeleonard jeromeleonard Awaiting requested review from jeromeleonard

@nadouani nadouani Awaiting requested review from nadouani

Assignees

@jeromeleonard jeromeleonard

Labels
scope:analyzer Issue is analyzer related
Projects
None yet
Milestone
1.5.0
Development

Successfully merging this pull request may close these issues.
4 participants
@3c7 @saadkadhi @nadouani @jeromeleonard