├── .gitignore ├── LICENSE ├── README.md ├── grouping ├── README.md ├── correlator.conf.sample ├── correlator.py ├── examples │ ├── CVE_events_clean.py │ ├── freq_by_indicators.py │ ├── helper.py │ ├── imphashes_events_clean.py │ ├── origfilenames_events_clean.py │ ├── originalfilenames_events.py │ ├── ssdeep_highmatch.py │ └── timestamps_events_clean.py ├── import_cve_events.py ├── import_digest_events.py ├── only_subset.py ├── pe_parse.py ├── rebuild_counters.py └── requirements.txt ├── hashes-extract.sh └── standalone ├── Database.py ├── Idapythonmagic.py ├── Kinginyourcastle.py └── README.md /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/.gitignore -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/README.md -------------------------------------------------------------------------------- /grouping/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/README.md -------------------------------------------------------------------------------- /grouping/correlator.conf.sample: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/correlator.conf.sample -------------------------------------------------------------------------------- /grouping/correlator.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/correlator.py -------------------------------------------------------------------------------- /grouping/examples/CVE_events_clean.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/examples/CVE_events_clean.py -------------------------------------------------------------------------------- /grouping/examples/freq_by_indicators.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/examples/freq_by_indicators.py -------------------------------------------------------------------------------- /grouping/examples/helper.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/examples/helper.py -------------------------------------------------------------------------------- /grouping/examples/imphashes_events_clean.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/examples/imphashes_events_clean.py -------------------------------------------------------------------------------- /grouping/examples/origfilenames_events_clean.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/examples/origfilenames_events_clean.py -------------------------------------------------------------------------------- /grouping/examples/originalfilenames_events.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/examples/originalfilenames_events.py -------------------------------------------------------------------------------- /grouping/examples/ssdeep_highmatch.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/examples/ssdeep_highmatch.py -------------------------------------------------------------------------------- /grouping/examples/timestamps_events_clean.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/examples/timestamps_events_clean.py -------------------------------------------------------------------------------- /grouping/import_cve_events.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/import_cve_events.py -------------------------------------------------------------------------------- /grouping/import_digest_events.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/import_digest_events.py -------------------------------------------------------------------------------- /grouping/only_subset.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/only_subset.py -------------------------------------------------------------------------------- /grouping/pe_parse.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/pe_parse.py -------------------------------------------------------------------------------- /grouping/rebuild_counters.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/rebuild_counters.py -------------------------------------------------------------------------------- /grouping/requirements.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/grouping/requirements.txt -------------------------------------------------------------------------------- /hashes-extract.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/hashes-extract.sh -------------------------------------------------------------------------------- /standalone/Database.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/standalone/Database.py -------------------------------------------------------------------------------- /standalone/Idapythonmagic.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/standalone/Idapythonmagic.py -------------------------------------------------------------------------------- /standalone/Kinginyourcastle.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/standalone/Kinginyourcastle.py -------------------------------------------------------------------------------- /standalone/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MISP/data-processing/HEAD/standalone/README.md --------------------------------------------------------------------------------