Alexandre Dulaunoy

icon indicating a website link http://www.foo.be/ icon indicating an email [email protected]

icon company @MISP @CIRCL @cve-search and many others icon location Europe icon location Enjoy when human are using machines in unexpected ways. I break stuff and I do stuff.

Results 382 comments of Alexandre Dulaunoy

update malpedia-galaxy

I did some rewrite of the malpedia misp output with some additional scripts in 2cd723e2f1e4e1502aa29512aff239a87d5cddae

Add Sarcoma ransomware group

Thanks for the PR. Sarcoma is already in the Ransomware group galaxy https://github.com/MISP/misp-galaxy/blob/main/clusters/ransomware.json#L34502 Maybe you could update the PR, with the CFR input for the other TAs.

Add Sarcoma ransomware group

I mean to remove Sarcoma and keep the other updates you did ;-)

Add Sarcoma ransomware group

Thanks again for the contribution. It was updated via two different commits referenced in this pull-request.

Bug: VirusTotal Enrichment Module Fails

Can you check which version of the misp-modules you are using? `curl http://127.0.0.1:6666/version` would do the job (you might need to check the url depending of your installation)

Bug: VirusTotal Enrichment Module Fails

Can you try the latest version https://github.com/MISP/misp-modules/releases/tag/v3.0.3 ?

Feature/simpler shibbauth behavior

Thanks for the PR. What will be the impact of the changes for existing Shibbauth configuration in MISP? Will it break the current ones?

New Feat.: Warninglists can be a dict with value and comments + New list: List of IPs from the SANS ISC research feed

I love the idea. I just need to dig a bit deeper to be sure it fits in the pipeline. The only issue I see is with existing lists and...

ARM Building Errors

The latest release of AIL 5.0 replaced ardb with kvrocks.

ARM Building Errors

Good question. We will have a look at `faup` to see if we cannot provide them a patch.