sssnake/autarch
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add Android forensics, IOC threat-intel DB, Compose companion; scrub secrets from configs

Browse Source
This commit is contained in:
SsSnake
2026-07-13 15:45:47 -07:00
parent 925216290f
commit e48d577bd5
387 changed files with 211976 additions and 921 deletions
Download Patch File Download Diff File Expand all files Collapse all files

282
data/ioc/spyware/citizen_lab/201706_RecklessRedux/misp.json Normal file
View File

@@ -0,0 +1,282 @@
{"response":[{
"Event": {
"id": "107",
"orgc_id": "2",
"org_id": "2",
"date": "2017-06-29",
"threat_level_id": "2",
"info": "Reckless Redux: Senior Mexican Legislators and Politicians Targeted with NSO Spyware",
"published": true,
"uuid": "59550bab-3ce0-48c3-ba55-06b28e96ca05",
"attribute_count": "9",
"analysis": "2",
"timestamp": "1498745915",
"distribution": "1",
"proposal_email_lock": false,
"locked": false,
"publish_timestamp": "1498745924",
"sharing_group_id": "0",
"Org": {
"id": "2",
"name": "citizenlab",
"uuid": "581b5fea-818c-441a-bd1d-49798e96ca05"
},
"Orgc": {
"id": "2",
"name": "citizenlab",
"uuid": "581b5fea-818c-441a-bd1d-49798e96ca05"
},
"Attribute": [
{
"id": "16345",
"type": "domain",
"category": "Network activity",
"to_ids": true,
"uuid": "59550c3b-22ac-4348-add4-06b38e96ca05",
"event_id": "107",
"distribution": "5",
"timestamp": "1498745915",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "smsmensaje.mx",
"SharingGroup": [
],
"ShadowAttribute": [
],
"RelatedAttribute": [
{
"Attribute": {
"id": "104",
"org_id": "2",
"info": "Reckless Exploit: Mexican Journalists, Lawyers, and a Child Targeted with NSO Spyware",
"value": "smsmensaje.mx"
}
}
]
},
{
"id": "16337",
"type": "url",
"category": "Network activity",
"to_ids": true,
"uuid": "59550c2c-d8dc-4c5c-a8e7-06b28e96ca05",
"event_id": "107",
"distribution": "5",
"timestamp": "1498745900",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "http:\/\/bit.ly\/29F2psM",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16338",
"type": "url",
"category": "Network activity",
"to_ids": true,
"uuid": "59550c2c-3820-4007-8f14-06b28e96ca05",
"event_id": "107",
"distribution": "5",
"timestamp": "1498745900",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "https:\/\/smsmensaje.mx\/8306090s\/",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16339",
"type": "url",
"category": "Network activity",
"to_ids": true,
"uuid": "59550c2c-7530-43d1-96c0-06b28e96ca05",
"event_id": "107",
"distribution": "5",
"timestamp": "1498745900",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "http:\/\/bit.ly\/1WONumj",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16340",
"type": "url",
"category": "Network activity",
"to_ids": true,
"uuid": "59550c2c-aa30-4e89-831d-06b28e96ca05",
"event_id": "107",
"distribution": "5",
"timestamp": "1498745900",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "https:\/\/smsmensaje.mx\/4995075s\/",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16341",
"type": "url",
"category": "Network activity",
"to_ids": true,
"uuid": "59550c2c-a2f8-4861-af47-06b28e96ca05",
"event_id": "107",
"distribution": "5",
"timestamp": "1498745900",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "http:\/\/bit.ly\/1WRYHm8",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16342",
"type": "url",
"category": "Network activity",
"to_ids": true,
"uuid": "59550c2c-0184-45e7-935a-06b28e96ca05",
"event_id": "107",
"distribution": "5",
"timestamp": "1498745900",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "https:\/\/smsmensaje.mx\/1351276s\/",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16343",
"type": "url",
"category": "Network activity",
"to_ids": true,
"uuid": "59550c2c-ef48-4348-902f-06b28e96ca05",
"event_id": "107",
"distribution": "5",
"timestamp": "1498745900",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "http:\/\/bit.ly\/1UUsVi6",
"SharingGroup": [
],
"ShadowAttribute": [
]
},
{
"id": "16344",
"type": "url",
"category": "Network activity",
"to_ids": true,
"uuid": "59550c2c-9e44-4b22-b65a-06b28e96ca05",
"event_id": "107",
"distribution": "5",
"timestamp": "1498745900",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "https:\/\/smsmensaje.mx\/9993247s\/",
"SharingGroup": [
],
"ShadowAttribute": [
]
}
],
"ShadowAttribute": [
],
"RelatedEvent": [
{
"Event": {
"id": "104",
"date": "2017-06-26",
"threat_level_id": "1",
"info": "Reckless Exploit: Mexican Journalists, Lawyers, and a Child Targeted with NSO Spyware",
"published": true,
"uuid": "59513ebe-4144-4e2d-8670-06b38e96ca05",
"analysis": "2",
"timestamp": "1498497838",
"distribution": "1",
"org_id": "2",
"orgc_id": "2"
},
"Org": {
"id": "2",
"name": "citizenlab",
"uuid": "581b5fea-818c-441a-bd1d-49798e96ca05"
},
"Orgc": {
"id": "2",
"name": "citizenlab",
"uuid": "581b5fea-818c-441a-bd1d-49798e96ca05"
}
}
],
"Tag": [
{
"id": "5",
"name": "SOURCE:CITIZENLAB",
"colour": "#ffad0d",
"exportable": true,
"org_id": false
},
{
"id": "8",
"name": "PUBLISHED",
"colour": "#91caff",
"exportable": true,
"org_id": false
},
{
"id": "16",
"name": "TLP:WHITE",
"colour": "#e8e8e8",
"exportable": true,
"org_id": false
},
{
"id": "39",
"name": "TARGET:MEXICO",
"colour": "#056685",
"exportable": true,
"org_id": false
}
]
}
}]}