Set of utilities to parse and use MISP galaxy clusters
Project description
MISP Galaxy Parser
Utilities to parse galaxy clusters and resolve labels (including synonyms).
There is some string normalization (whitespace removal and compound words handling) that can be improved, but anything domain-specific is computed using MITRE galaxies.
./bin/query_galaxy.py -q sednit -g mitre-intrusion-set
> Mapping 'sednit' to: ['misp-galaxy:mitre-intrusion-set="APT28 - G0007"']
./bin/query_galaxy.py -q apt28 -g mitre-intrusion-set
> Mapping 'apt28' to: ['misp-galaxy:mitre-intrusion-set="APT28 - G0007"']
./bin/query_galaxy.py -q feodo -g malpedia
> Mapping 'feodo' to: ['misp-galaxy:malpedia="Emotet"']
./bin/query_galaxy.py -q emotet -g malpedia
> Mapping 'emotet' to: ['misp-galaxy:malpedia="Emotet"']
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Close
Hashes for misp_galaxy_parser-0.0.3-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | e6050b7dcaa779f81f1e064d517812c8dbc04613302ea62dc1b65339875699d9 |
|
MD5 | 7e815566b67c1c2f562a7047dec66fcc |
|
BLAKE2b-256 | 2fa466374760f54e74d43fece27c836ad841440ef35f9cf661332ece057210f9 |