Alexandre Dulaunoy
Alexandre Dulaunoy
There is a set of tools to add. StellarParticle would need to be added a synonym.
# Threat actor galaxy ~~~json { "description": "Reporting regarding activity related to the SolarWinds supply chain injection has grown quickly since initial disclosure on 13 December 2020. A significant amount...
Relationships to add
> While I think the operation/campaign distinction makes sense for APT actors, for cybercrime they are often used the other way around: I would read a "ransomware operation" as a...
Super! Let me know when it's ready and I'll have a look. Thanks a lot.
The best is to simplify such approach. In AIL for example, multiple processes can read from the same queue or publisher. That's it. So depending of the resource of the...
From the disque repo: ``` WARNING: This is alpha code NOT suitable for production. The implementation and API will likely change in significant ways during the next months. The code...
I would strongly support the idea. This could be also used to shared cases via other sharing mechanisms such as MISP.
Confirmed especially when you have indicators such as IP addresses in the objects.