sssnake/autarch
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add Android forensics, IOC threat-intel DB, Compose companion; scrub secrets from configs

Browse Source
This commit is contained in:
SsSnake
2026-07-13 15:45:47 -07:00
parent 925216290f
commit e48d577bd5
387 changed files with 211976 additions and 921 deletions
Download Patch File Download Diff File Expand all files Collapse all files

377
data/ioc/spyware/citizen_lab/201810_TheKingdomCameToCanada/misp.json Normal file
View File

@@ -0,0 +1,377 @@
{"response":[{
"Event": {
"id": "138",
"orgc_id": "2",
"org_id": "2",
"date": "2018-10-01",
"threat_level_id": "1",
"info": "The Kingdom Came To Canada",
"published": true,
"uuid": "5bb27709-12a0-4240-b90e-6f848064ab0b",
"attribute_count": "20",
"analysis": "2",
"timestamp": "1538422691",
"distribution": "1",
"proposal_email_lock": false,
"locked": false,
"publish_timestamp": "1538423091",
"sharing_group_id": "0",
"Org": {
"id": "2",
"name": "citizenlab",
"uuid": "581b5fea-818c-441a-bd1d-49798e96ca05"
},
"Orgc": {
"id": "2",
"name": "citizenlab",
"uuid": "581b5fea-818c-441a-bd1d-49798e96ca05"
},
"Attribute": [
{
"id": "18379",
"type": "domain",
"category": "Network activity",
"to_ids": true,
"uuid": "5bb277a3-277c-4cc9-a7d0-4c668064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422691",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "beststores4u.com",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18380",
"type": "domain",
"category": "Network activity",
"to_ids": true,
"uuid": "5bb277a3-ac80-403b-a3a7-4c668064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422691",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "cheapapartmentsaroundme.com",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18361",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb2777f-5a18-4c67-9a35-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422655",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "akhbar-arabia.com",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18362",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb2777f-17dc-4422-b198-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422655",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "all-sales.info",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18363",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb2777f-36c4-4621-abf9-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422655",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "arabnews365.com",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18364",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb2777f-a8fc-4c13-8aed-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422655",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "arabworld.biz",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18365",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb2777f-ebd0-4410-b335-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422655",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "daily-sport.news",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18366",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb2777f-a91c-45dc-99ae-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422655",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "dinneraroundyou.com",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18367",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb2777f-2ef0-4e54-b5dd-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422655",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "findmyplants.com",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18368",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb2777f-cc98-4611-8d13-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422655",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "housesfurniture.com",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18369",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb2777f-4fb0-4727-9c47-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422655",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "kingdom-deals.com",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18370",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb2777f-11e4-4591-b2d2-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422655",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "kingdom-news.com",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18371",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb2777f-f954-4227-9e89-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422655",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "mideast-today.com",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18372",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb2777f-6e5c-496e-975b-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422655",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "muslim-world.info",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18373",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb2777f-9834-4835-9cd0-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422655",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "news-gazette.info",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18374",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb2777f-1d34-42cc-b869-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422655",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "nouvelles247.com",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18375",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb2777f-ad24-4ab7-bb07-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422655",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "promosdereve.com",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18376",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb27780-e238-499c-a677-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422656",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "social-life.info",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18377",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb27780-fe30-4662-9264-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422656",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "sunday-deals.com",
"SharingGroup": [],
"ShadowAttribute": []
},
{
"id": "18378",
"type": "domain",
"category": "Payload delivery",
"to_ids": true,
"uuid": "5bb27780-ba04-4fa1-9198-700d8064ab0b",
"event_id": "138",
"distribution": "5",
"timestamp": "1538422656",
"comment": "",
"sharing_group_id": "0",
"deleted": false,
"value": "wonderfulinsights.com",
"SharingGroup": [],
"ShadowAttribute": []
}
],
"ShadowAttribute": [],
"RelatedEvent": [],
"Tag": [
{
"id": "5",
"name": "SOURCE:CITIZENLAB",
"colour": "#ffad0d",
"exportable": true,
"org_id": false
},
{
"id": "7",
"name": "DETECT",
"colour": "#cccccc",
"exportable": true,
"org_id": false
},
{
"id": "8",
"name": "PUBLISHED",
"colour": "#91caff",
"exportable": true,
"org_id": false
}
]
}
}]}