Alexandre Dulaunoy

DeTTACT - new galaxy

2

https://github.com/rabobank-cdc/DeTTACT/blob/master/sample-data/techniques-administration-endpoints.yaml

https://www.research-collection.ethz.ch/bitstream/id/5647001/20190507_MB_HS_IRNV1_rev.pdf?sequence=1

Origin of name per reference - threat-actor synonyms

Solving the issue of threat actor, activity group, campaign and operation

2

# threat-actor-classification meta field There is an old and persistence issue in attribution world and basically no-one really agrees on this. So we decided to start a specific metadata `threat-actor-classification`...

Verify threat-actor and malware reference from https://github.com/fugakango/MalwaRepo

Multiprocessing per queue is not supported

27

Multiprocessing per queue is not supported. If you have to process a huge dataset and only a single process is handling a queue, you are time bound with DNS resolution...

MISP warning lists?

2

Cool idea. It might be interesting to build a [MISP warning list](https://github.com/MISP/misp-warninglists) out of this list. To quickly spot in MISP events related with such network activity.

Add a search to the feed cache search (/feeds/searchCaches)

2

Add a search to the feed cache search (/feeds/searchCaches)

Feed generator - if result of the index is empty, there is no exception handler

Including the result/numbers of warning-list to lower down the quality of the contribution