sssnake/autarch
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add Android forensics, IOC threat-intel DB, Compose companion; scrub secrets from configs

Browse Source
This commit is contained in:
SsSnake
2026-07-13 15:45:47 -07:00
parent 925216290f
commit e48d577bd5
387 changed files with 211976 additions and 921 deletions
Download Patch File Download Diff File Expand all files Collapse all files

294
data/ioc/spyware/citizen_lab/201705_TaintedLeaks/misp.json Normal file
View File

@@ -0,0 +1,294 @@
{"response":[{
"Event": {
"id": "100",
"orgc_id": "2",
"org_id": "2",
"date": "2017-05-25",
"threat_level_id": "2",
"info": "TAINTED LEAKS: Disinformation and Phishing With a Russian Nexus",
"published": true,
"uuid": "5926f385-8a58-4fc0-a075-5d828e96ca05",
"attribute_count": "12",
"analysis": "2",
"timestamp": "1495725316",
"distribution": "1",
"proposal_email_lock": false,
"locked": false,
"publish_timestamp": "1495725350",
"sharing_group_id": "0",
"Org": {
"id": "2",
"name": "citizenlab",
"uuid": "581b5fea-818c-441a-bd1d-49798e96ca05"
},
"Orgc": {
"id": "2",
"name": "citizenlab",
"uuid": "581b5fea-818c-441a-bd1d-49798e96ca05"
},
"Attribute": [
{
"id": "16046",
"type": "domain",
"category": "Network activity",
"to_ids": true,
"uuid": "5926f463-dc78-4a45-ba38-53928e96ca05",
"event_id": "100",
"distribution": "5",
"timestamp": "1495725155",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "id833.ga",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16047",
"type": "domain",
"category": "Network activity",
"to_ids": true,
"uuid": "5926f463-9b30-4133-9f8a-53928e96ca05",
"event_id": "100",
"distribution": "5",
"timestamp": "1495725155",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "id834.ga",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16048",
"type": "domain",
"category": "Network activity",
"to_ids": true,
"uuid": "5926f463-8944-4fcc-b570-53928e96ca05",
"event_id": "100",
"distribution": "5",
"timestamp": "1495725155",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "id9954.gq",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16049",
"type": "domain",
"category": "Network activity",
"to_ids": true,
"uuid": "5926f463-a1dc-4042-a982-53928e96ca05",
"event_id": "100",
"distribution": "5",
"timestamp": "1495725155",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "id4242.ga",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16050",
"type": "domain",
"category": "Network activity",
"to_ids": true,
"uuid": "5926f463-45f0-45c6-bf0a-53928e96ca05",
"event_id": "100",
"distribution": "5",
"timestamp": "1495725155",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "mail-google-login.blogspot.com",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16051",
"type": "domain",
"category": "Network activity",
"to_ids": true,
"uuid": "5926f463-f7d4-432d-b56a-53928e96ca05",
"event_id": "100",
"distribution": "5",
"timestamp": "1495725155",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "com-securitysettingpage.tk",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16055",
"type": "ip-dst",
"category": "Network activity",
"to_ids": true,
"uuid": "5926f4a8-cf18-4416-b85d-5d828e96ca05",
"event_id": "100",
"distribution": "5",
"timestamp": "1495725224",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "89.40.181.119",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16056",
"type": "ip-dst",
"category": "Network activity",
"to_ids": true,
"uuid": "5926f4a8-e18c-4b39-b0ac-5d828e96ca05",
"event_id": "100",
"distribution": "5",
"timestamp": "1495725224",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "89.32.40.238",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16057",
"type": "ip-dst",
"category": "Network activity",
"to_ids": true,
"uuid": "5926f4a8-cb10-4528-89f8-5d828e96ca05",
"event_id": "100",
"distribution": "5",
"timestamp": "1495725224",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "80.255.12.237",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16058",
"type": "email-src",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5926f504-4e00-4343-9488-5d828e96ca05",
"event_id": "100",
"distribution": "5",
"timestamp": "1495725316",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "g.mail2017@yandex.com",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16059",
"type": "email-src",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5926f504-53f4-4700-8a2b-5d828e96ca05",
"event_id": "100",
"distribution": "5",
"timestamp": "1495725316",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "annaablony@mail.com",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16060",
"type": "email-src",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5926f504-a840-4d0e-8d26-5d828e96ca05",
"event_id": "100",
"distribution": "5",
"timestamp": "1495725316",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "myprimaryreger@gmail.com",
"SharingGroup": [
],
"ShadowAttribute": [
]
}
],
"ShadowAttribute": [
],
"RelatedEvent": [
],
"Tag": [
{
"id": "5",
"name": "SOURCE:CITIZENLAB",
"colour": "#ffad0d",
"exportable": true,
"org_id": false
},
{
"id": "8",
"name": "PUBLISHED",
"colour": "#91caff",
"exportable": true,
"org_id": false
}
]
}
}]}