Commit Graph

35 Commits

Author SHA1 Message Date
Stephen Campbell
2c4757b429 New Version 1.5 of Red Framerwork: map Disguising Assets from Meta Kill Chain 2024-07-23 04:58:02 -04:00
Stephen Campbell
1b9ccce6c7 Added URLs to incident pages 2024-05-18 18:19:30 -04:00
Stephen Campbell
87cdbde844 Add URLs to markdown pages for incidents 2024-05-18 09:29:22 -04:00
Christophe Vandeplas
352e5411ec
fix: [code] MISP Galaxy skips duplicate values 2023-12-21 09:16:38 +01:00
Christophe Vandeplas
197dcd3aea
new: [code] MISP Galaxy supports relations 2023-12-20 16:18:39 +01:00
Christophe Vandeplas
8b8100611c
new: [code] MISP Galaxy supports most models 2023-12-20 11:29:33 +01:00
Christophe Vandeplas
f12df578ab
fix: [code] Fix MISP Galaxy value without ID 2023-12-19 15:57:20 +01:00
Christophe Vandeplas
d2ca8fbcc7
new: [code] Generate DISARM as MISP Galaxy fixes #22 2023-12-02 18:08:26 +01:00
Christophe Vandeplas
cc38695dae
fix: fixes resource_counters_string wrong variable 2023-12-02 09:14:58 +01:00
Christophe Vandeplas
3b9f356530
fix: [code] make panda happy 2023-12-02 09:09:21 +01:00
VVX7
cae9cbc55e update stix for opencti compatability 2022-07-03 19:59:09 -04:00
VVX7
fd84d4c13d update stix generator for OpenCTI compatability 2022-07-03 19:09:05 -04:00
VVX7
ba1ccf25a2 update stix descriptions 2022-07-02 16:01:17 -04:00
Mike Klein
c888a7d6f4 subtechnique description updates
Updated subtechniques so that now all have a description. Also made slight name changes to a few techniques and subtechniques but retained the disarm_id and overall nature of all of them
2022-07-02 15:40:09 -04:00
VVX7
c7b5d59876 add subtechniques to stix2 generator. update STIX bundles. use subtechnique dot notation name convention in DISARM_FRAMEWORKS_MASTER.xlsx 2022-07-02 13:29:40 -04:00
VVX7
f1d7a8ac3d add subtechniques to stix2 generator. update STIX bundles. use subtechnique dot notation name convention in DISARM_FRAMEWORKS_MASTER.xlsx 2022-07-02 00:28:52 -04:00
VVX7
8937d50328 add subtechniques to stix2 generator 2022-07-02 00:06:46 -04:00
Mike Klein
1450b8e5ff Updated technique descriptions and subtechnique mapping 2022-07-01 13:32:09 -04:00
Sara-Jayne Terp
14dc0cf8bb apply generated_pages_fudge to all the object markdown pages 2022-07-01 17:24:47 +01:00
Sara-Jayne Terp
5575210da1 last ungodly hack for generate_pages repeat 2022-07-01 17:18:26 +01:00
Sara-Jayne Terp
9c0a1f8845 attempt2 at generated_pages repeat fix. Ungodly hack 2022-07-01 17:16:39 +01:00
Sara-Jayne Terp
5b73d3afab try fix for repeated generated_pages string 2022-07-01 17:12:05 +01:00
Sara-Jayne Terp
a483bf4c80 added code to check for name and summary changes across versions 2022-07-01 13:18:16 +01:00
Sara-Jayne Terp
9f847e4d99 Merge branch 'DISARM-Revision' 2022-07-01 08:38:56 +01:00
Sara-Jayne Terp
54866566ea framework tidyup 2022-07-01 08:36:25 +01:00
Mike Klein
2c6e6bee1b Revisions to DISARM Framework 2022-06-30 23:30:18 -04:00
Sara-Jayne Terp
9ea0ffa1d7 dataset updates 2022-06-30 23:22:19 +01:00
Sara-Jayne Terp
82053a2221 code update 2022-06-30 21:36:27 +01:00
Sara-Jayne Terp
3ea4176a4f Update generate_csvs_for_mike-checkpoint.ipynb 2022-06-30 20:59:35 +01:00
Sara-Jayne Terp
90da8bc9d6 added code to check dataset 2022-06-30 20:59:25 +01:00
Sara-Jayne Terp
8162faab82 generated github pages 2022-06-30 19:50:22 +01:00
Sara-Jayne Terp
c11e9d06ad Added EEAS framework objects and STIX generator
Added framework objects:
- Added technique T0066 "Degrade adversary" to TA02
- Added technique T0067 "Plan to discredit credible sources" to TA02
- Added technique T0068 "respond to breaking news event" to TA02
- Added technique T0069  "respond to active crisis" to TA02
- Added technique T0070 "Analyze existing communities" to TA02
- Added technique T0071 "Find echo chambers" to TA13
- Added technique T0072  "Segment audiences" to TA13

Added STIX generator from repo DISARM-stix2, and added code to generate github files, databases, and STIX from the same Jupyter notebook.
2022-02-20 15:40:34 -05:00
Sara-Jayne Terp
aca100b364 framework and page updates
Framework updates:
- TA08 added text "Used for preparation before broader release, and as message honing."
- TA10 change name from "Go Physical" to "Drive Offline Activity"
- T0004 change name from "Competing Narratives" to "Devise Competing Narratives"
- T0005 convert into a tactic stage, TA13.  Change name from "Center of Gravity Analysis" to "Conduct Center of Gravity Analysis"
- T0006 rename from "Create Master Narratives" to "Develop Narrative Concepts".  nb narratology: can't create master narratives - can only latch onto them
- T0011 change name from "Hijack legitimate account" to "Compromise legitimate account"
- T0065. Create new technique "use physical broadcast capabilities" under TA04
- T0014. Rename from "Create funding campaigns" to "Prepare fundraising campaigns".  Exited text to reflect that this new name allows the possibility of either creating a new one, or revitalizing an existing one.
- T0015 rename from "Create hashtag" to "Create hashtags".  Change text to mention hashtag groups.
- T0017 rename from "Promote online funding" to "Conduct Fundraising Campaigns"
- T0018 rename from "Paid targeted ads" to "Purchase advertisements"
- T0026 rename from "Create fake research" to "create pseudoscientific or disingenuous research"

Page and file updates:
- Added MITRE, FIU, and SPICE to DISARM's history
- reran github page generator
- reran sqlite generator
2022-02-02 10:57:17 -05:00
Sara-Jayne Terp
28b97c74a7 tidied up database generating code 2022-01-30 06:01:32 -05:00
Sara-Jayne Terp
22abaf93d8 Copy AMITT repository, clean up and rebrand
Took a copy of the current AMITT github repository - we'll be updating this and merging the SPICE branch back in
Rebranded to DISARM
Moved generated pages to their own folder, to make looking at the repository less confusing
2022-01-29 11:34:46 -05:00