Set of utilities to parse and use MISP galaxy clusters
Project description
Galaxy Parser for MISP
Utilities to parse galaxy clusters and resolve labels (including synonyms).
There is some string normalization (whitespace removal and compound words handling) that can be improved, but anything domain-specific is computed using MITRE galaxies.
./bin/query_galaxy.py -q sednit -g mitre-intrusion-set
> Mapping 'sednit' to: ['misp-galaxy:mitre-intrusion-set="APT28 - G0007"']
./bin/query_galaxy.py -q apt28 -g mitre-intrusion-set
> Mapping 'apt28' to: ['misp-galaxy:mitre-intrusion-set="APT28 - G0007"']
./bin/query_galaxy.py -q feodo -g malpedia
> Mapping 'feodo' to: ['misp-galaxy:malpedia="Emotet"']
./bin/query_galaxy.py -q emotet -g malpedia
> Mapping 'emotet' to: ['misp-galaxy:malpedia="Emotet"']
Contributing
The galaxy-parser-for-misp project team welcomes contributions from the community. Before you start working with galaxy-parser-for-misp, please read our Developer Certificate of Origin. All contributions to this repository must be signed as described on that page. Your signature certifies that you wrote the patch or have the right to pass it on as an open-source patch. For more detailed information, refer to CONTRIBUTING.md.
License
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for misp_galaxy_parser-0.1.0-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 7498a4f367fa493182a2860dd87bc554b67da7be28b9af02102bcd7594adb9f6 |
|
MD5 | 95880bd2f4d1951b09cdd8f1435aaf8f |
|
BLAKE2b-256 | 3be2bac6479c0c26cc859b52c26379ebcef982b3b4ea7c63e373dabe47479e49 |