Skip to content

misp-stix v2.4.182 - Improvement on the import of STIX 2.x objects as Galaxy Clusters

Compare
Choose a tag to compare
@chrisr3d chrisr3d released this 21 Jun 09:20
· 452 commits to main since this release
260920b

v2.4.182 - 2023-12-14

Add

  • [stix2 import] Handling clusters sharing group id for content converter from external STIX 2.x
  • [stix2 import] Added cluster distribution argument to the external STIX 2 to MISP parser
  • [tests] Tests for internal STIX 2.x content with custom labels
  • [tests] Added a resource_level attribute to the tests for intrusion-set objects export as STIX 2.0 & 2.1
  • [documentation] Regenerated documentation with the latest changes
  • [documentation] Added documentation for intrusion-set objects export as STIX 2.0 & 2.1
  • [tests] Added tests for intrusion-set objects export as STIX 2.0 & 2.1
  • [stix2 export] Exporting intrusion-set MISP objects to STIX 2.0 & 2.1
  • [documentation] Regenerated documentation with the latest changes
  • [documentation] Added documentation for intrusion-set objects export as STIX 2.0 & 2.1
  • [tests] Added tests for intrusion-set objects export as STIX 2.0 & 2.1
  • [stix2 export] Exporting intrusion-set MISP objects to STIX 2.0 & 2.1

Chg

  • [poetry, package] Bumped latest versions

Fix

  • [stix2 import] Some quick clean-up
  • [stix2 import] Added missing cluster distribution argument
  • [stix2 import] Avoiding issue with custom labels
  • [stix2 import] Avoiding issues with custom labels
  • [stix2 import] Avoiding issues with custom labels
  • [stix2 import] Added missing entry for identity objects in the conversion mapping
  • [stix2 import] Fixed identity objects import conversion
  • [stix2 import] Making sure the Location object has a region field before calling it to define a Galaxy Cluster value
  • [stix2 import] Fixed Location objects conversion when it should be converted to country or region Galaxy Cluster
  • [stix2 import] Fixed wrong Location object field
  • [stix2 import] Removed unnecessary mapping layer
  • [stix2 import] Some clean-up
  • [stix2 import] The ObservedData converter is not ready yet
  • [stix2 import] Added intrusion-set to the STIX 2.x objects conversion mapping to MISP
  • [documentation] Updated description of STIX 2 objects exported from Galaxy clusters
  • [documentation] Fixed documentation for intrusion-set objects export as STIX 2.0 & 2.1
  • [tests] Removed debugging print
  • [tests] A simple clean-up on a MISP event sample definition
  • [stix2 import] Cleaned up unnecessary mapping
  • [stix2 import] Fixed inheritance between the Observable object conversion classes

Wip

  • [tests] Tests for identity objects import from STIX 2.x
  • [tests] Tests for person object import from internal STIX 2.x
  • [stix2 import] Converting person objects from Internal STIX 2.x Identity objects
  • [stix2 import] Converting STIX 2.x Identity objects from converters
  • [stix2 import] Importing MISP annotation objects from STIX 2.1 Note objects
  • [stix2 import] Parsing STIX 2.x Custom objects from converters
  • [stix2 import] Converting STIX 2.x Location objects from converters
  • [stix2 import] Converting STIX 2.x Vulnerability objects from converters
  • [stix2 import] Parsing STIX 2.x Tool objects from converters
  • [stix2 import] Parsing STIX 2.x Threat Actor objects from converters
  • [tests] Tests for intrusion-set object import from STIX 2.x
  • [stix2 import] Converting Intrusion Set objects from the converters side
  • [stix2 import] Converting Campaign objects from the converters
  • [stix2 import] Converting Course of Action objects from converters & cleaned up a few no longer used parsing methods that are now supported in converters too
  • [stix2 import] Using a generic STIX 2 objects parsing method