pymisp 2.5.9__py3-none-any.whl → 2.5.12__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of pymisp might be problematic. Click here for more details.

@@ -0,0 +1,59 @@
1
+ {
2
+ "attributes": {
3
+ "description": {
4
+ "description": "Action description",
5
+ "misp-attribute": "text",
6
+ "ui-priority": 1
7
+ },
8
+ "filters": {
9
+ "description": "Restrictions on the trigger",
10
+ "misp-attribute": "text",
11
+ "multiple": true,
12
+ "ui-priority": 1
13
+ },
14
+ "inputs": {
15
+ "description": "Inputs of the workflow",
16
+ "misp-attribute": "text",
17
+ "multiple": true,
18
+ "ui-priority": 1
19
+ },
20
+ "jobs": {
21
+ "description": "Jobs defined in the workflow",
22
+ "misp-attribute": "text",
23
+ "multiple": true,
24
+ "ui-priority": 1
25
+ },
26
+ "name": {
27
+ "description": "Name of the action.",
28
+ "misp-attribute": "text",
29
+ "ui-priority": 1
30
+ },
31
+ "notes": {
32
+ "description": "Any other informations",
33
+ "misp-attribute": "text",
34
+ "multiple": true,
35
+ "ui-priority": 1
36
+ },
37
+ "outputs": {
38
+ "description": "Outputs generated in the workflow",
39
+ "misp-attribute": "text",
40
+ "multiple": true,
41
+ "ui-priority": 1
42
+ },
43
+ "trigger": {
44
+ "description": "How is the action trigerred.",
45
+ "misp-attribute": "text",
46
+ "multiple": true,
47
+ "ui-priority": 1
48
+ }
49
+ },
50
+ "description": "GitHub Actions",
51
+ "meta-category": "misc",
52
+ "name": "github-action",
53
+ "requiredOneOf": [
54
+ "name",
55
+ "description"
56
+ ],
57
+ "uuid": "3331aaf4-1007-454e-ba7b-6f39ad67decb",
58
+ "version": 1
59
+ }
@@ -0,0 +1,116 @@
1
+ {
2
+ "attributes": {
3
+ "account-id": {
4
+ "description": "Google Account ID.",
5
+ "misp-attribute": "text",
6
+ "ui-priority": 1
7
+ },
8
+ "alternate-e-mails": {
9
+ "description": "Alternate e-mails associated with the main e-mail.",
10
+ "misp-attribute": "email-src",
11
+ "multiple": true,
12
+ "ui-priority": 1
13
+ },
14
+ "contact-e-mail": {
15
+ "description": "Account recovery contact e-mail.",
16
+ "misp-attribute": "email-src",
17
+ "ui-priority": 1
18
+ },
19
+ "created-on": {
20
+ "description": "The date and time the account was created.",
21
+ "disable_correlation": true,
22
+ "misp-attribute": "datetime",
23
+ "ui-priority": 1
24
+ },
25
+ "creation-ip": {
26
+ "description": "The IP address used to create the account.",
27
+ "disable_correlation": false,
28
+ "misp-attribute": "ip-src",
29
+ "ui-priority": 1
30
+ },
31
+ "deletion-date": {
32
+ "description": "The date and time the account was deleted.",
33
+ "disable_correlation": true,
34
+ "misp-attribute": "datetime",
35
+ "ui-priority": 1
36
+ },
37
+ "e-mail": {
38
+ "description": "The main e-mail associated with the Google ID.",
39
+ "misp-attribute": "email-src",
40
+ "ui-priority": 1
41
+ },
42
+ "end-of-service-date": {
43
+ "description": "The date and time the service was terminated.",
44
+ "disable_correlation": true,
45
+ "misp-attribute": "datetime",
46
+ "ui-priority": 1
47
+ },
48
+ "last-logins-date": {
49
+ "description": "The dates and times of the user's most recent logins.",
50
+ "disable_correlation": true,
51
+ "misp-attribute": "datetime",
52
+ "multiple": true,
53
+ "ui-priority": 1
54
+ },
55
+ "last-updated-date": {
56
+ "description": "The date and time the account was last updated.",
57
+ "disable_correlation": true,
58
+ "misp-attribute": "datetime",
59
+ "ui-priority": 1
60
+ },
61
+ "login-ip": {
62
+ "description": "The IP addresses used to login into the account.",
63
+ "disable_correlation": false,
64
+ "misp-attribute": "ip-src",
65
+ "multiple": true,
66
+ "ui-priority": 1
67
+ },
68
+ "name": {
69
+ "description": "The full name of the person associated with the Google ID.",
70
+ "misp-attribute": "full-name",
71
+ "ui-priority": 1
72
+ },
73
+ "recovery-e-mail": {
74
+ "description": "Account recovery e-mail.",
75
+ "misp-attribute": "email-src",
76
+ "ui-priority": 1
77
+ },
78
+ "recovery-sms": {
79
+ "description": "Account recovery phone number.",
80
+ "misp-attribute": "phone-number",
81
+ "ui-priority": 1
82
+ },
83
+ "related-links": {
84
+ "description": "Any link to a page containing information about this Google user.",
85
+ "misp-attribute": "link",
86
+ "multiple": true,
87
+ "ui-priority": 1
88
+ },
89
+ "services": {
90
+ "description": "Services associated with the Google Account ID.",
91
+ "disable_correlation": true,
92
+ "misp-attribute": "text",
93
+ "ui-priority": 1
94
+ },
95
+ "user-avatar": {
96
+ "description": "A user profile picture or avatar.",
97
+ "misp-attribute": "attachment",
98
+ "multiple": true,
99
+ "ui-priority": 1
100
+ },
101
+ "user-description": {
102
+ "description": "A description of the user.",
103
+ "misp-attribute": "text",
104
+ "ui-priority": 1
105
+ }
106
+ },
107
+ "description": "An object containing subscriber information received from Google.",
108
+ "meta-category": "misc",
109
+ "name": "google-account",
110
+ "requiredOneOf": [
111
+ "account-id",
112
+ "e-mail"
113
+ ],
114
+ "uuid": "1d795bfa-29ae-433c-b23a-bb5a1c77e944",
115
+ "version": 1
116
+ }
@@ -96,6 +96,7 @@
96
96
  "description": "Layer 7 protocol of the network connection.",
97
97
  "disable_correlation": true,
98
98
  "misp-attribute": "text",
99
+ "multiple": true,
99
100
  "sane_default": [
100
101
  "HTTP",
101
102
  "HTTPS",
@@ -0,0 +1,90 @@
1
+ {
2
+ "attributes": {
3
+ "description": {
4
+ "description": "Description of the text summarised.",
5
+ "disable_correlation": true,
6
+ "misp-attribute": "text",
7
+ "ui-priority": 1
8
+ },
9
+ "original-text": {
10
+ "description": "Original text before any processing.",
11
+ "disable_correlation": true,
12
+ "misp-attribute": "attachment",
13
+ "ui-priority": 0
14
+ },
15
+ "original-text-timestamp": {
16
+ "description": "Publication date of the original text (not related to the processing).",
17
+ "disable_correlation": true,
18
+ "misp-attribute": "datetime",
19
+ "ui-priority": 1
20
+ },
21
+ "original-url": {
22
+ "description": "URL of the original text.",
23
+ "disable_correlation": true,
24
+ "misp-attribute": "link",
25
+ "ui-priority": 1
26
+ },
27
+ "summariser-model": {
28
+ "description": "Model used for the summariser",
29
+ "misp-attribute": "text",
30
+ "multiple": true,
31
+ "sane_default": [
32
+ "gpt-3.5-turbo",
33
+ "gpt-3.5-turbo-16k",
34
+ "gpt-3.5-turbo-0125 (16k)",
35
+ "gpt-4",
36
+ "gpt-4-turbo",
37
+ "gpt-4-o",
38
+ "gpt-4o-mini",
39
+ "o3-mini"
40
+ ],
41
+ "ui-priority": 0
42
+ },
43
+ "summariser-timestamp": {
44
+ "description": "Date when the summary was produced.",
45
+ "disable_correlation": true,
46
+ "misp-attribute": "datetime",
47
+ "ui-priority": 0
48
+ },
49
+ "summariser-version": {
50
+ "description": "Version of the code used for the summariser.",
51
+ "disable_correlation": true,
52
+ "misp-attribute": "text",
53
+ "ui-priority": 0
54
+ },
55
+ "summary": {
56
+ "description": "Summary of the original text by the AI-based or NLP-based summariser.",
57
+ "disable_correlation": true,
58
+ "misp-attribute": "text",
59
+ "ui-priority": 0
60
+ },
61
+ "tcode": {
62
+ "description": "MITRE ATT&CK Technique ID extracted by the AI-based or NLP-based summariser.",
63
+ "disable_correlation": true,
64
+ "misp-attribute": "text",
65
+ "multiple": true,
66
+ "ui-priority": 0
67
+ },
68
+ "title": {
69
+ "description": "Title of the text summarised.",
70
+ "disable_correlation": true,
71
+ "misp-attribute": "text",
72
+ "ui-priority": 0
73
+ },
74
+ "ttp": {
75
+ "description": "TTP of the original text extracted by the AI-based or NLP-based summariser.",
76
+ "disable_correlation": true,
77
+ "misp-attribute": "text",
78
+ "multiple": true,
79
+ "ui-priority": 0
80
+ }
81
+ },
82
+ "description": "Summariser output from an AI-based or NLP summariser.",
83
+ "meta-category": "misc",
84
+ "name": "summariser-output",
85
+ "required": [
86
+ "summary"
87
+ ],
88
+ "uuid": "38633d19-123a-4b0f-bc4a-ccb381e58e49",
89
+ "version": 1
90
+ }
pymisp/mispevent.py CHANGED
@@ -1121,7 +1121,7 @@ class MISPObject(AnalystDataBehaviorMixin):
1121
1121
  It is the same as calling multiple times add_attribute with the same object_relation.
1122
1122
  '''
1123
1123
  if not attributes:
1124
- logger.warning(f"No attributes provided for object relation '{object_relation}'; skipping attribute addition.")
1124
+ logger.info(f"No attributes provided for object relation '{object_relation}'; skipping attribute addition.")
1125
1125
  return []
1126
1126
 
1127
1127
  to_return = []
@@ -1732,14 +1732,14 @@ class MISPEvent(AnalystDataBehaviorMixin):
1732
1732
  event_report.pop('distribution', None)
1733
1733
  event_report.pop('SharingGroup', None)
1734
1734
  event_report.pop('sharing_group_id', None)
1735
- to_return['EventReport'].append(event_report.to_dict())
1735
+ to_return['EventReport'].append(event_report._to_feed())
1736
1736
 
1737
1737
  if with_cryptographic_keys and self.cryptographic_keys:
1738
1738
  to_return['CryptographicKey'] = []
1739
1739
  for cryptographic_key in self.cryptographic_keys:
1740
1740
  cryptographic_key.pop('parent_id', None)
1741
1741
  cryptographic_key.pop('id', None)
1742
- to_return['CryptographicKey'].append(cryptographic_key.to_dict())
1742
+ to_return['CryptographicKey'].append(cryptographic_key._to_feed())
1743
1743
 
1744
1744
  return {'Event': to_return}
1745
1745
 
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.3
2
2
  Name: pymisp
3
- Version: 2.5.9
3
+ Version: 2.5.12
4
4
  Summary: Python API for MISP.
5
5
  License: BSD-2-Clause
6
6
  Author: Raphaël Vinot
@@ -28,24 +28,24 @@ Provides-Extra: openioc
28
28
  Provides-Extra: pdfexport
29
29
  Provides-Extra: url
30
30
  Provides-Extra: virustotal
31
- Requires-Dist: RTFDE (>=0.1.2) ; (python_version <= "3.9") and (extra == "email")
32
- Requires-Dist: beautifulsoup4 (>=4.13.3) ; extra == "openioc"
31
+ Requires-Dist: RTFDE (>=0.1.2.1) ; (python_version <= "3.9") and (extra == "email")
32
+ Requires-Dist: beautifulsoup4 (>=4.13.4) ; extra == "openioc"
33
33
  Requires-Dist: deprecated (>=1.2.18)
34
34
  Requires-Dist: docutils (>=0.21.2) ; (python_version >= "3.11") and (extra == "docs")
35
- Requires-Dist: extract_msg (>=0.54.0) ; extra == "email"
36
- Requires-Dist: lief (>=0.16.4) ; extra == "fileobjects"
35
+ Requires-Dist: extract_msg (>=0.54.1) ; extra == "email"
36
+ Requires-Dist: lief (>=0.16.5) ; extra == "fileobjects"
37
37
  Requires-Dist: myst-parser (>=4.0.1) ; (python_version >= "3.11") and (extra == "docs")
38
38
  Requires-Dist: oletools (>=0.60.2) ; extra == "email"
39
39
  Requires-Dist: pydeep2 (>=0.5.1) ; extra == "fileobjects"
40
40
  Requires-Dist: pyfaup (>=1.2) ; extra == "url"
41
41
  Requires-Dist: python-dateutil (>=2.9.0.post0)
42
42
  Requires-Dist: python-magic (>=0.4.27) ; extra == "fileobjects"
43
- Requires-Dist: reportlab (>=4.3.1) ; extra == "pdfexport"
43
+ Requires-Dist: reportlab (>=4.4.0) ; extra == "pdfexport"
44
44
  Requires-Dist: requests (>=2.32.3)
45
45
  Requires-Dist: sphinx (>=8.2.3) ; (python_version >= "3.11") and (extra == "docs")
46
- Requires-Dist: sphinx-autodoc-typehints (>=3.1.0) ; (python_version >= "3.11") and (extra == "docs")
47
- Requires-Dist: urllib3 (>=2.3.0) ; extra == "brotli"
48
- Requires-Dist: validators (>=0.34.0) ; extra == "virustotal"
46
+ Requires-Dist: sphinx-autodoc-typehints (>=3.2.0) ; (python_version >= "3.11") and (extra == "docs")
47
+ Requires-Dist: urllib3 (>=2.4.0) ; extra == "brotli"
48
+ Requires-Dist: validators (>=0.35.0) ; extra == "virustotal"
49
49
  Project-URL: Documentation, https://pymisp.readthedocs.io
50
50
  Project-URL: Repository, https://github.com/MISP/PyMISP
51
51
  Project-URL: issues, https://github.com/MISP/PyMISP/issues
@@ -152,9 +152,11 @@ pymisp/data/misp-objects/objects/game-cheat/definition.json,sha256=4xqSM9PzOzuWZ
152
152
  pymisp/data/misp-objects/objects/generalizing-persuasion-framework/definition.json,sha256=6EFw1OW2Qzbp1tip2PgwYhjvqh2koo5Rl75h1TzNE-s,5590
153
153
  pymisp/data/misp-objects/objects/geolocation/definition.json,sha256=mvbU1_yi-9m69SJQWn7fh5k1MLUFIagPU2Mfp4GpjP8,3308
154
154
  pymisp/data/misp-objects/objects/git-vuln-finder/definition.json,sha256=_b_Ux9biIpYXK0gmCzGxmp0AHi1dGEaW3H_MiftHx3s,3644
155
+ pymisp/data/misp-objects/objects/github-action/definition.json,sha256=UQ7dgVaOKZ_CkVRQ3mt2uPOg8JRZOZ4JxFNKSkAdTRg,1403
155
156
  pymisp/data/misp-objects/objects/github-repo/definition.json,sha256=zmGO6g5fRlvp419DKXo3HYQc3-i6_VqCGyIxnb4i4II,3483
156
157
  pymisp/data/misp-objects/objects/github-user/definition.json,sha256=CdHNDa0oLpPB25h5S-7ybEb9MSx92KbqAT7DmNckeNM,3463
157
158
  pymisp/data/misp-objects/objects/gitlab-user/definition.json,sha256=xCqY6NAG1DhtyHDCGVik6yXCGhPie4AfnXAvCk9z6qg,1188
159
+ pymisp/data/misp-objects/objects/google-account/definition.json,sha256=fsyjqkMU12X0F4NpI1Mx4i09MQHNb1n-1HwJSIVrO0Q,3467
158
160
  pymisp/data/misp-objects/objects/google-safe-browsing/definition.json,sha256=Bxo1eu_EbY8Q1mMv0y0lDv9Rn0xDwmPtesuZ8jtk4Xc,739
159
161
  pymisp/data/misp-objects/objects/google-threat-intelligence-report/definition.json,sha256=EZgeF_PbgrxLVGaszm_BJPoWbEB8D7O52anB68vkA8s,1879
160
162
  pymisp/data/misp-objects/objects/greynoise-ip/definition.json,sha256=pPp13wr0ATb1GYrrjJRLJxzkXJmkbajCifo4IfOeNYc,1850
@@ -206,7 +208,7 @@ pymisp/data/misp-objects/objects/monetary-impact/definition.json,sha256=s44CoduM
206
208
  pymisp/data/misp-objects/objects/mutex/definition.json,sha256=zqun14zDa2seXkX5BGtlL_0dkT7LqTTEDagh-1lXKVs,744
207
209
  pymisp/data/misp-objects/objects/narrative/definition.json,sha256=VXEm_lcQgR7uFtMalrdbI73-ivv6HJHQVx6lPU0FYzA,2200
208
210
  pymisp/data/misp-objects/objects/netflow/definition.json,sha256=pQ_meRpiPEchaTBNTBUyUT5zPmL7QNIQgLGKdd_KTqE,4103
209
- pymisp/data/misp-objects/objects/network-connection/definition.json,sha256=seFEI1Npj5EHXt3RPP2TrZ_oq3YKDQDe0YGsZQO37LE,4224
211
+ pymisp/data/misp-objects/objects/network-connection/definition.json,sha256=6rGG8ZhW3YxgGAV_l91GFpZXk4QpyJ7iuedH5FU38HE,4248
210
212
  pymisp/data/misp-objects/objects/network-profile/definition.json,sha256=urPC6ysgZ5kaiB2L2ilL19iGmR2GNUzjO4pcUngQl5E,6175
211
213
  pymisp/data/misp-objects/objects/network-socket/definition.json,sha256=qEE1yvRnrpylHut3jFDJnPWWfsz61ZJO0-Lp40WOSjM,6571
212
214
  pymisp/data/misp-objects/objects/network-traffic/definition.json,sha256=jZSGhItwP-1Vxm7fv_IqbijXqnAvPFFKhjxolaDXudE,3144
@@ -309,6 +311,7 @@ pymisp/data/misp-objects/objects/stairwell/definition.json,sha256=vXK_23lt156F_w
309
311
  pymisp/data/misp-objects/objects/stix2-pattern/definition.json,sha256=oCVvk1vU__nFQxFChclCgwclzX7wEm0MYWY0HjvuJ94,891
310
312
  pymisp/data/misp-objects/objects/stock/definition.json,sha256=ZCV8X9VXRQPXt6_qpNL0kUrJpyc6_COAAUY2desjMcU,5507
311
313
  pymisp/data/misp-objects/objects/submarine/definition.json,sha256=1i33QhqVNkQeMbT0Glk7LyOSZkjnfBUrX23jflIX7FE,4223
314
+ pymisp/data/misp-objects/objects/summariser-output/definition.json,sha256=WDdiEKUxVM-dTy4AZO8R_4AxsT_WgRLfdXoMvG0SaHI,2639
312
315
  pymisp/data/misp-objects/objects/suricata/definition.json,sha256=FQ5Is0dnVSr7ttDpBWnzI5Th9Sjx5nSh5WGYU9RZ9O0,952
313
316
  pymisp/data/misp-objects/objects/target-system/definition.json,sha256=PaM41BdcjXCYzs1oY0N-ALabDJgzQVxHqnjj70zZ_S8,1000
314
317
  pymisp/data/misp-objects/objects/task/definition.json,sha256=ugSxQkRnyMd8Jb6kMj5yJCveNyc-mJ-tCh3jiQKXXmA,3029
@@ -367,7 +370,7 @@ pymisp/data/misp-objects/schema_relationships.json,sha256=MCusp9GAyuHTo3lLyBrsvl
367
370
  pymisp/data/schema-lax.json,sha256=2QICdCbtfXRJkTVjwb7xjF3ypys2wOtrUyE1ZDz_qes,8561
368
371
  pymisp/data/schema.json,sha256=79N2hObemthb_syUHksDqM4djFttsWZQDg1sTYZYxys,9178
369
372
  pymisp/exceptions.py,sha256=IgGGadv5lnLAvO7Q6AjF0vEbjoWwwDWLYwMn-8pkU_k,1965
370
- pymisp/mispevent.py,sha256=G6TLW-laRQRAJPb47EwZEb7ehYBn0rH4VF9oRUfDPMo,121528
373
+ pymisp/mispevent.py,sha256=rDlW0amvLSizJFjEid5Bw0wVLdF0pOsWqvdb0JMyISc,121527
371
374
  pymisp/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
372
375
  pymisp/tools/__init__.py,sha256=_KCihYo82e8G5cHV321ak2sgbao2GyFjf4sSTMiN_IM,2233
373
376
  pymisp/tools/_psl_faup.py,sha256=JyK8RQm8DPWvNuoF4rQpiE0rBm-Az-sr38Kl46dmWcs,7034
@@ -398,7 +401,7 @@ pymisp/tools/update_objects.py,sha256=sp_XshzgtRjAU0Mqg8FgRTaokjVKLImyQ02xIcPSrH
398
401
  pymisp/tools/urlobject.py,sha256=PIucy1356zaljUm1NbeKmEpHpAUK9yiK2lAugcMp2t8,2489
399
402
  pymisp/tools/vehicleobject.py,sha256=bs7f4d47IBi2-VumssSM3HlqkH0viyHTLmIHQxe8Iz8,3687
400
403
  pymisp/tools/vtreportobject.py,sha256=NsdYzgqm47dywYeW8UnWmEDeIsf07xZreD2iJzFm2wg,3217
401
- pymisp-2.5.9.dist-info/LICENSE,sha256=1oPSVvs96qLjbJVi3mPn0yvWs-6aoIF6BNXi6pVlFmY,1615
402
- pymisp-2.5.9.dist-info/METADATA,sha256=YNrgux5KH0_ShGiW-FinobWdFpRqPeCEqonvdY2U2oQ,8881
403
- pymisp-2.5.9.dist-info/WHEEL,sha256=XbeZDeTWKc1w7CSIyre5aMDU_-PohRwTQceYnisIYYY,88
404
- pymisp-2.5.9.dist-info/RECORD,,
404
+ pymisp-2.5.12.dist-info/LICENSE,sha256=1oPSVvs96qLjbJVi3mPn0yvWs-6aoIF6BNXi6pVlFmY,1615
405
+ pymisp-2.5.12.dist-info/METADATA,sha256=zKo_Bqx7xWbM3RvDTsXuMzEqbncOjUp0KAMHwP5yCnk,8884
406
+ pymisp-2.5.12.dist-info/WHEEL,sha256=b4K_helf-jlQoXBBETfwnf4B04YC67LOev0jo4fX5m8,88
407
+ pymisp-2.5.12.dist-info/RECORD,,
@@ -1,4 +1,4 @@
1
1
  Wheel-Version: 1.0
2
- Generator: poetry-core 2.1.1
2
+ Generator: poetry-core 2.1.3
3
3
  Root-Is-Purelib: true
4
4
  Tag: py3-none-any