Coleman Kane

[MISP JSON Feeds] Create the connector

1

## Use case There are a lot of communities that publish MISP feeds as folders containing multiple JSON events, which contain the MISP event & attribute data. It is a...

Trying to build this on Arch, which is using the relatively newer Linux 5.12 kernel and ran into the issue. Basically when I do the `cargo build` step, with or...

Modify the eBPF programlet compilation to add `-fno-stack-protector` similar to https://github.com/Sysinternals/SysmonForLinux/pull/42 Additionally, the compiler warnings identified two calls to `labs(...)` that would always evaluate to `true` due to them operating...

Fix Correlation Graph bugs reported in Issue #2351

2

### Proposed changes * Remove the hard-coded node cap for traversal in the Correlation view * Remove the hard-coded entity type limitations from the Correlation view code * In correlation...

## Use case Often when I am viewing data in the Knowledge Graph charts, I'd like to be able to filter out some of the nodes using arbitrary criteria beyond...

This is intended to be a connector that will fetch data from an external CRITs (https://crits.github.io) instance, and import it into OpenCTI. Similar to the existing `external-import/misp` connector. **This is...

Use `uname -m` instead of `arch` as latter isn't available everywhere

1

In the `make-postgresql.sh` script, the system architecture is queried by `arch`. However, that command isn't present by default on a lot of systems (for example, Arch Linux). Since `uname` is...

ESET connector causing runaway Redis memory consumption despite REDIS__TRIMMING=1000000

4

## Description When enabling the `external-import/eset` connector with defaults (from `external-import/eset/docker-compose.yml`), it causes redis to rapidly run away with consuming all memory. I have `REDIS__TRIMMING=1000000` set in my `docker-compose.yml` and...

## Use case Yara connector creates relationships without a marking definition ## Current Workaround Manually add marking definitions via Data->Relationships ## Proposed Solution When the yara connector creates a new...

Fixes for Python3 compatibility

1

Numerous fixes to make this work with Python3. I have tested this with Python2.7 and the safety mechanisms I put in place should preserve backward compatibility with Python2. - print...