Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Analyzer] Greynoise Labs #1758

Closed
mlodic opened this issue Jun 23, 2023 · 10 comments
Closed

[Analyzer] Greynoise Labs #1758

mlodic opened this issue Jun 23, 2023 · 10 comments
Assignees
@moonpatel
Labels
new_analyzer

Comments

@mlodic
Copy link
Member

mlodic commented Jun 23, 2023

Name

Greynoise_Labs

Link

https://www.greynoise.io/blog/labs-api-its-playtime

Type of analyzer

observable for IP only.
It should extract the data from all the available queries that support IP addresses:

  • noiseRank
  • topC2s
  • topKnocks

Why should we use it

It's free and experimental: https://www.greynoise.io/blog/labs-api-its-playtime

Possible implementation

check the docs: https://api.labs.greynoise.io/1/docs/
@moonpatel
Copy link
Contributor

Hey @mlodic I would like to work on this issue. Can you assign this to me?
And one more thing, do I need to combine all three queries (noiseRank, topC2s, topKnocks) and show them on the result page ?

@mlodic
Copy link
Member Author

mlodic commented Feb 27, 2024

hey, yes you should follow the analyzer creation guidelines and male queries for all the different endpoints

@moonpatel
Copy link
Contributor

moonpatel commented Feb 28, 2024 •
edited
Loading

Hey, @mlodic
This API is available in only GraphQL. Can I use graphene for it ?

@mlodic
Copy link
Member Author

mlodic commented Feb 28, 2024

sure

@eshaan7
Copy link
Member

eshaan7 commented Feb 28, 2024 •
edited
Loading

This API is available in only GraphQL. Can I use graphene for it ?

Don't need graphene to query a GraphQL API. Just use requests, @moonpatel.

@moonpatel
Copy link
Contributor

moonpatel commented Feb 29, 2024 •
edited
Loading

The Greynoise analyzer seems to have already existed. But it does not fetch queries like topC2s noiseRank and topKnocks. Should I modify that analyzer directly? @eshaan7 @mlodic

@mlodic
Copy link
Member Author

mlodic commented Feb 29, 2024

nope cause this is another service, please create a new one and ignore the other one that already exist

@moonpatel
Copy link
Contributor

This is the result so far now.
grey_noise_result1.webm
Is this okay or do I need to make any changes?
@mlodic

@mlodic
Copy link
Member Author

mlodic commented Feb 29, 2024

please open a PR and follow the guidelines. Issues are not meant to be used for reviews

@moonpatel
Copy link
Contributor

I mean is this output format okay? If its fine then I will finalize the changes and create a PR. @mlodic

@moonpatel moonpatel mentioned this issue Mar 19, 2024
Closed
22 tasks
@moonpatel moonpatel mentioned this issue Mar 28, 2024
Merged
22 tasks
mlodic added a commit that referenced this issue Mar 29, 2024
@moonpatel @mlodic
@drosetti @0ssigeno @carellamartina @fgibertoni @dependabot @code-review-doctor @shivam-Purohit
fixes #1758 - greynoise labs analyzer (#2225)
e26efa0 
* greynoise labs analyzer

* fix

* update migration numbers

* update maximum tlp

* fix

---------

Signed-off-by: 0ssigeno <s.berni@certego.net>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Shivam Purohit <shivampurohit900@gmail.com>
Co-authored-by: Matteo Lodi <30625432+mlodic@users.noreply.github.com>
Co-authored-by: Daniele Rosetti <d.rosetti@certego.net>
Co-authored-by: 0ssigeno <s.berni@certego.net>
Co-authored-by: Martina Carella <m.carella@certego.net>
Co-authored-by: Daniele Rosetti <55402684+drosetti@users.noreply.github.com>
Co-authored-by: fgibertoni <152909479+fgibertoni@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Simone Berni <simone.berni2@studio.unibo.it>
Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com>
Co-authored-by: Shivam Purohit <shivampurohit900@gmail.com>
@mlodic mlodic closed this as completed May 10, 2024
mlodic added a commit that referenced this issue May 13, 2024
@mlodic @0ssigeno
@moonpatel @drosetti @carellamartina @fgibertoni @dependabot @code-review-doctor @shivam-Purohit @cristinaascari @ip2location @suryapavan1611 @g4ze
Merge pull request #2291 from intelowlproject/develop
98197f7 
* Fix migration signal

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix kwargs

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fail if in production mode

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Validated disable with 429

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix is_from_org information

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix greynoise api requirement

Signed-off-by: 0ssigeno <s.berni@certego.net>

* fixes #1758 - greynoise labs analyzer (#2225)

* greynoise labs analyzer

* fix

* update migration numbers

* update maximum tlp

* fix

---------

Signed-off-by: 0ssigeno <s.berni@certego.net>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Shivam Purohit <shivampurohit900@gmail.com>
Co-authored-by: Matteo Lodi <30625432+mlodic@users.noreply.github.com>
Co-authored-by: Daniele Rosetti <d.rosetti@certego.net>
Co-authored-by: 0ssigeno <s.berni@certego.net>
Co-authored-by: Martina Carella <m.carella@certego.net>
Co-authored-by: Daniele Rosetti <55402684+drosetti@users.noreply.github.com>
Co-authored-by: fgibertoni <152909479+fgibertoni@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Simone Berni <simone.berni2@studio.unibo.it>
Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com>
Co-authored-by: Shivam Purohit <shivampurohit900@gmail.com>

* removed scanner issue template

* fixes #1663 - Abusix analyzer (#2233)

* fixes #1663 - abusix analyzer

* fix

* updated migration numbers

---------

Signed-off-by: 0ssigeno <s.berni@certego.net>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Shivam Purohit <shivampurohit900@gmail.com>
Co-authored-by: Matteo Lodi <30625432+mlodic@users.noreply.github.com>
Co-authored-by: Daniele Rosetti <d.rosetti@certego.net>
Co-authored-by: 0ssigeno <s.berni@certego.net>
Co-authored-by: Martina Carella <m.carella@certego.net>
Co-authored-by: Daniele Rosetti <55402684+drosetti@users.noreply.github.com>
Co-authored-by: fgibertoni <152909479+fgibertoni@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Simone Berni <simone.berni2@studio.unibo.it>
Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com>
Co-authored-by: Shivam Purohit <shivampurohit900@gmail.com>

* Bump uwsgitop from 0.11 to 0.12 in /requirements (#2237)

Bumps [uwsgitop](https://github.com/xrmx/uwsgitop) from 0.11 to 0.12.
- [Commits](xrmx/uwsgitop@v0.11...v0.12)

---
updated-dependencies:
- dependency-name: uwsgitop
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Fix ses email

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Jobs now requires both analyzers AND connectors to be empty

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fixes for quad9

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Removed comment on enable back

Signed-off-by: 0ssigeno <s.berni@certego.net>

* HTTPerror should not have the entire traceback

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Trying to unlock the git process deleting the lock file

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix ingestor periodic task

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix retrieval of the task

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix ingestor python class retrieval

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix test

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix tests

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fixes

Signed-off-by: 0ssigeno <s.berni@certego.net>

* specified version of nginx

* Priority mgmt (#2242)

* Priority mgmt

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Blake

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Docs

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Changed order of cache table

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Manage case where cache it is not initialized

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fixes

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Blake

Signed-off-by: 0ssigeno <s.berni@certego.net>

---------

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Bump pillow from 10.2.0 to 10.3.0 in /requirements (#2240)

Bumps [pillow](https://github.com/python-pillow/Pillow) from 10.2.0 to 10.3.0.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@10.2.0...10.3.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-type: direct:production
...

Signed-off-by: 0ssigeno <s.berni@certego.net>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Shivam Purohit <shivampurohit900@gmail.com>
Co-authored-by: Matteo Lodi <30625432+mlodic@users.noreply.github.com>
Co-authored-by: Daniele Rosetti <d.rosetti@certego.net>
Co-authored-by: 0ssigeno <s.berni@certego.net>
Co-authored-by: Martina Carella <m.carella@certego.net>
Co-authored-by: Daniele Rosetti <55402684+drosetti@users.noreply.github.com>
Co-authored-by: fgibertoni <152909479+fgibertoni@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Simone Berni <simone.berni2@studio.unibo.it>
Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com>
Co-authored-by: Shivam Purohit <shivampurohit900@gmail.com>

* fixed rescan observable (#2243)

* Added pivot buttons (#2239)

* added pivot buttons

* fixes

* linter

* docs

* updated doc

* changes

---------

Co-authored-by: Matteo Lodi <30625432+mlodic@users.noreply.github.com>

* added tlp info icon (#2246)

* adjusted 'Investigation Overview' button (#2244)

* adjusted investigation button

* fix

* Allow filtering for disabled boolean

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix cache

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix env variables + healthcheck

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix visualizable table (#2249)

* Fix images url

* Fixed table images using absolute url

* improved frontend validation in visualizer framework

* modified JobIsRunningAlert component (#2256)

* changed JobIsRunningAlert

* prettier

* mocked flow

* adjusts to default domain reputation visualizer + analyzers urls and abstractmethods (#2250)

* little adjusts

* adjust

* refactored base_url in url to enable healthchecks

* adjust

* added update abstract method

* added logging of intel_owl package

* adjusted containers dependencies

* Fix

Signed-off-by: 0ssigeno <s.berni@certego.net>

* support for Elastic8 and removal of support for older versions (#2262)

* support for elastic 8

* elastic8

* elastic8

* removed elasticsearch sniffing

* Update migration guide from postgres 12 to 16 (#2260)

* Improved migration from postgres 12 to postgres 16

* Trimmed extra whitespaces

* Fix volume

Signed-off-by: 0ssigeno <s.berni@certego.net>

* fixes #1698 - hfinger analyzer (#2241)

* hfinger analyzer

* dependency for hfinger analyzer

* migrations for hfinger analyzer

* overridden update method

* default config fix

* modified usage.md

* fix

* fix

* Fix phoneinfo

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Minor fix

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fixes

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fixing logs

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Bump channels from 4.0.0 to 4.1.0 in /requirements (#2255)

Bumps [channels](https://github.com/django/channels) from 4.0.0 to 4.1.0.
- [Changelog](https://github.com/django/channels/blob/main/CHANGELOG.txt)
- [Commits](django/channels@4.0.0...4.1.0)

---
updated-dependencies:
- dependency-name: channels
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump quark-engine from 24.2.1 to 24.4.1 in /requirements (#2254)

Bumps [quark-engine](https://github.com/quark-engine/quark-engine) from 24.2.1 to 24.4.1.
- [Release notes](https://github.com/quark-engine/quark-engine/releases)
- [Commits](quark-engine/quark-engine@v24.2.1...v24.4.1)

---
updated-dependencies:
- dependency-name: quark-engine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* adjusted guide (#2264)

* Fix docs

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Little adjusts (#2263)

* little adjusts

* adjust

* refactored base_url in url to enable healthchecks

* adjust

* added update abstract method

* added logging of intel_owl package

* adjusted threatfox

* threatfox analyzer fix

* threatfox analyzer fix

* threatfox analyzer fix

* threatfox analyzer fix

* threatfox analyzer fix

* elastic shards/replicas reduced

* Fix

Signed-off-by: 0ssigeno <s.berni@certego.net>

* typo

* fix

Signed-off-by: 0ssigeno <s.berni@certego.net>

* adjusted NodeToolbar (#2273)

* Fix migration

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Cache are adjusted through celery

Signed-off-by: 0ssigeno <s.berni@certego.net>

* fix

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Added stop step for intermediate container (#2266)

* create_or_update

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Typo

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fixes

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Remove dns0 analyzers (#2274)

* Added migrations to remove analyzers and playbook

* Removed analyzers sources

* Removed dns0 analyzer from docs

* Fix

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix black

* Added if conditions for saver migrations

---------

Signed-off-by: 0ssigeno <s.berni@certego.net>
Co-authored-by: 0ssigeno <s.berni@certego.net>

* Frontend - adjusted job metadata section (#2272)

* adjusted JobInfoCard

* fixed  fitView in chrome

* Frontend - improvements (#2278)

* improvements

* fixed test

* Fix_ci (#2284)

* Fix_ci

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Typo

Signed-off-by: 0ssigeno <s.berni@certego.net>

---------

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Optimization

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Optimization

Signed-off-by: 0ssigeno <s.berni@certego.net>

* ASN maxmind integration (#2282)

* Changed library from maxminddb to geoip2

* Refactoring maxmind not finished

* Refactoring maxmind analyzer

* Added methods for query db

* Made a method 'private'

* Renamed method

* Made attributes 'private'

* Added return type

* Improved log message

* Renamed back to update() because of updating cron

* Fixed media_root settings

* Added log to tar extraction

* Removed unnecessary variable

* Improved log messages

* Readded maxminddb library

* Update api_app/analyzers_manager/observable_analyzers/maxmind.py

Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com>

* Fix_ci (#2284)

* Fix_ci

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Typo

Signed-off-by: 0ssigeno <s.berni@certego.net>

---------

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Changed library from maxminddb to geoip2

* Refactoring maxmind not finished

* Refactoring maxmind analyzer

* Added methods for query db

* Made a method 'private'

* Renamed method

* Made attributes 'private'

* Added return type

* Improved log message

* Renamed back to update() because of updating cron

* Fixed media_root settings

* Added log to tar extraction

* Removed unnecessary variable

* Improved log messages

* Readded maxminddb library

* Moved functions and improved logs

* Changed error handling

* Fixed deepsource warning

---------

Signed-off-by: 0ssigeno <s.berni@certego.net>
Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com>
Co-authored-by: Simone Berni <simone.berni2@studio.unibo.it>

* Abusix send email (#2283)

* Added AbuseSubmitter connector

* Renamed and updated connector EmailSender

* Added monkeypatch to email sender connector

* Updated EmailSender parameters

* Added AbuseDomainToAbuseIp pivot

* Updated AbuseDomainToAbuseIp pivot

* Updated pivots

* Changed health_check_status to editable

* Changed health_check_status back to not editable

* receiver update

* subject and body update

* added abusix update migration

* fix investigation creation

* updated AbuseDomainToIp should_run

* updated AbuseIpToSubmission should_run

* added plugin migrations

* fix migrations

* Changed email sender body

* fixed migrations dependencies

* updates email sender and abuse submitter

* Fix migrations

* Fix

* Fix

* Fix playbooks migrations

* Update api_app/connectors_manager/connectors/abuse_submitter.py

Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com>

* Added AbuseSubmitter connector

* Renamed and updated connector EmailSender

* Added monkeypatch to email sender connector

* Updated EmailSender parameters

* Added AbuseDomainToAbuseIp pivot

* Updated AbuseDomainToAbuseIp pivot

* Updated pivots

* Changed health_check_status to editable

* Changed health_check_status back to not editable

* receiver update

* subject and body update

* added abusix update migration

* fix investigation creation

* updated AbuseDomainToIp should_run

* updated AbuseIpToSubmission should_run

* added plugin migrations

* fix migrations

* Changed email sender body

* fixed migrations dependencies

* updates email sender and abuse submitter

* Fix migrations

* Fix

* Fix

* Fix playbooks migrations

* added update method

* added update method

* removed AbuseSubmitter values

Co-authored-by: Simone Berni <simone.berni2@studio.unibo.it>

* removed EmailSender values

* Update should_run

Co-authored-by: Simone Berni <simone.berni2@studio.unibo.it>

* changed AbuseDomainToAbuseIp to AnyCompare

* update compare

* added update

* removed AbuseIpToSubmission

* Added AbuseSubmitter connector

* Renamed and updated connector EmailSender

* Added monkeypatch to email sender connector

* Updated EmailSender parameters

* Added AbuseDomainToAbuseIp pivot

* Updated AbuseDomainToAbuseIp pivot

* Updated pivots

* Changed health_check_status to editable

* Changed health_check_status back to not editable

* receiver update

* subject and body update

* added abusix update migration

* fix investigation creation

* updated AbuseDomainToIp should_run

* updated AbuseIpToSubmission should_run

* added plugin migrations

* fix migrations

* Changed email sender body

* fixed migrations dependencies

* updates email sender and abuse submitter

* Fix migrations

* Fix

* Fix

* Fix playbooks migrations

* added update method

* Added AbuseSubmitter connector

* Changed health_check_status to editable

* Changed health_check_status back to not editable

* added abusix update migration

* added plugin migrations

* fix migrations

* fixed migrations dependencies

* Fix migrations

* removed AbuseSubmitter values

Co-authored-by: Simone Berni <simone.berni2@studio.unibo.it>

* removed EmailSender values

* Update should_run

Co-authored-by: Simone Berni <simone.berni2@studio.unibo.it>

* changed AbuseDomainToAbuseIp to AnyCompare

* update compare

* added update

* removed AbuseIpToSubmission

* Fix pivot migrations

* Renamed playbook Abuse_Domain to Takedown_Request

* Update api_app/connectors_manager/connectors/abuse_submitter.py

Co-authored-by: Matteo Lodi <30625432+mlodic@users.noreply.github.com>

* Update api_app/connectors_manager/connectors/abuse_submitter.py

Co-authored-by: Matteo Lodi <30625432+mlodic@users.noreply.github.com>

* Added EmailSender header and footer

* Fix linters

* Fix test

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix pivot test

* Fix

Signed-off-by: 0ssigeno <s.berni@certego.net>

---------

Signed-off-by: 0ssigeno <s.berni@certego.net>
Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com>
Co-authored-by: Simone Berni <simone.berni2@studio.unibo.it>
Co-authored-by: Matteo Lodi <30625432+mlodic@users.noreply.github.com>
Co-authored-by: 0ssigeno <s.berni@certego.net>

* Fixed EmailSender output and plugin descriptions (#2290)

* Updated EmailSender output

* Updated plugin descriptions

* Update authentication/models.py

Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com>

* Update authentication/models.py

Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com>

* deepsource adjusts

* bump and changelog

* fixes for Yara

* removing Yara visualizer from Static Analysis Playbook and updated and fixed Floss Analyzer

* Removed mkdir

Signed-off-by: 0ssigeno <s.berni@certego.net>

* blake post merge

* Yara already made in dockerfile

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Removed import

Signed-off-by: 0ssigeno <s.berni@certego.net>

* update yara visualizer

* Docs update (#2293)

* Added list of pre-built pivots

* Added list of pre-built connectors

* Added list of pre-built playbooks

* Added already implemented modules for pivots

* Added running a plugin

* tried adjust

* Adjust field_to_compare description

---------

Co-authored-by: Matteo Lodi <30625432+mlodic@users.noreply.github.com>

* Fix dependencies

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Typo

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Upgrade docs

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fixed update with None token (#2287)

* Bump django-ses from 3.5.0 to 4.0.0 in /requirements (#2280)

Bumps [django-ses](https://github.com/django-ses/django-ses) from 3.5.0 to 4.0.0.
- [Release notes](https://github.com/django-ses/django-ses/releases)
- [Changelog](https://github.com/django-ses/django-ses/blob/main/CHANGES.md)
- [Commits](django-ses/django-ses@v3.5.0...v4.0.0)

---
updated-dependencies:
- dependency-name: django-ses
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump djangorestframework from 3.14.0 to 3.15.1 in /requirements (#2219)

Bumps [djangorestframework](https://github.com/encode/django-rest-framework) from 3.14.0 to 3.15.1.
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.14.0...3.15.1)

---
updated-dependencies:
- dependency-name: djangorestframework
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump library/nginx from 1.25.4-alpine to 1.26.0-alpine in /docker (#2285)

Bumps library/nginx from 1.25.4-alpine to 1.26.0-alpine.

---
updated-dependencies:
- dependency-name: library/nginx
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Starting playbooks (#2297)

* starting playbooks

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Not starting

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix migration

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Prettier

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix

Signed-off-by: 0ssigeno <s.berni@certego.net>

---------

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Add IP2WHOIS (#2288)

* Add IP2WHOIS

* Update Usage.md

* Update ip2whois.py

- Add an example JSON result to showcase the fields in the result.
- Attempt to fix an error reported by DeepSource: Python.

* Update ip2whois.py

Fix formatting error.

* Update ip2whois.py

Fix the E501 line too long error by changed to another JSON example.

* Update ip2whois.py

* fixed migration

---------

Co-authored-by: Matteo Lodi <30625432+mlodic@users.noreply.github.com>

* Bump gunicorn from 20.1.0 to 22.0.0 in /integrations/pcap_analyzers (#2276)

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 20.1.0 to 22.0.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@20.1.0...22.0.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-type: direct:production
...

Signed-off-by: 0ssigeno <s.berni@certego.net>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Shivam Purohit <shivampurohit900@gmail.com>
Co-authored-by: Matteo Lodi <30625432+mlodic@users.noreply.github.com>
Co-authored-by: Daniele Rosetti <d.rosetti@certego.net>
Co-authored-by: 0ssigeno <s.berni@certego.net>
Co-authored-by: Martina Carella <m.carella@certego.net>
Co-authored-by: Daniele Rosetti <55402684+drosetti@users.noreply.github.com>
Co-authored-by: fgibertoni <152909479+fgibertoni@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Simone Berni <simone.berni2@studio.unibo.it>
Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com>
Co-authored-by: Shivam Purohit <shivampurohit900@gmail.com>

* Bump gunicorn from 20.1.0 to 22.0.0 in /integrations/tor_analyzers (#2277)

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 20.1.0 to 22.0.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@20.1.0...22.0.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-type: direct:production
...

Signed-off-by: 0ssigeno <s.berni@certego.net>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Shivam Purohit <shivampurohit900@gmail.com>
Co-authored-by: Matteo Lodi <30625432+mlodic@users.noreply.github.com>
Co-authored-by: Daniele Rosetti <d.rosetti@certego.net>
Co-authored-by: 0ssigeno <s.berni@certego.net>
Co-authored-by: Martina Carella <m.carella@certego.net>
Co-authored-by: Daniele Rosetti <55402684+drosetti@users.noreply.github.com>
Co-authored-by: fgibertoni <152909479+fgibertoni@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Simone Berni <simone.berni2@studio.unibo.it>
Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com>
Co-authored-by: Shivam Purohit <shivampurohit900@gmail.com>

* Bump django-auth-ldap from 4.7.0 to 4.8.0 in /requirements (#2270)

Bumps [django-auth-ldap](https://github.com/django-auth-ldap/django-auth-ldap) from 4.7.0 to 4.8.0.
- [Release notes](https://github.com/django-auth-ldap/django-auth-ldap/releases)
- [Changelog](https://github.com/django-auth-ldap/django-auth-ldap/blob/master/docs/changes.rst)
- [Commits](django-auth-ldap/django-auth-ldap@4.7.0...4.8.0)

---
updated-dependencies:
- dependency-name: django-auth-ldap
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump gunicorn in /integrations/malware_tools_analyzers/requirements (#2275)

Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 20.1.0 to 22.0.0.
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@20.1.0...22.0.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-type: direct:production
...

Signed-off-by: 0ssigeno <s.berni@certego.net>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Shivam Purohit <shivampurohit900@gmail.com>
Co-authored-by: Matteo Lodi <30625432+mlodic@users.noreply.github.com>
Co-authored-by: Daniele Rosetti <d.rosetti@certego.net>
Co-authored-by: 0ssigeno <s.berni@certego.net>
Co-authored-by: Martina Carella <m.carella@certego.net>
Co-authored-by: Daniele Rosetti <55402684+drosetti@users.noreply.github.com>
Co-authored-by: fgibertoni <152909479+fgibertoni@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Simone Berni <simone.berni2@studio.unibo.it>
Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com>
Co-authored-by: Shivam Purohit <shivampurohit900@gmail.com>

* updated frontend dependencies

* Fix serializer

Signed-off-by: 0ssigeno <s.berni@certego.net>

* added linkedin button (#2299)

* Fixed tests and fixed maxmind update (#2298)

* added plugin info icon in raw data report (#2296)

* added plugin info icon

* fix test

* adjusted tests

* refactor pluginReportTables

* Change investigation default name (#2301)

* Change investigation default name

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Blake

Signed-off-by: 0ssigeno <s.berni@certego.net>

---------

Signed-off-by: 0ssigeno <s.berni@certego.net>

* adjusted old job removal

* Graph prevention with scan_mode check_previous_analysis (#2302)

* Graph prevention with scan_mode check_previous_analysis

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Wops

Signed-off-by: 0ssigeno <s.berni@certego.net>

---------

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fix + test for runtime config

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fixes

Signed-off-by: 0ssigeno <s.berni@certego.net>

* domain playbook adjusts (#2304)

* domain playbook adjusts

* black

* Added few Docstrings in authentication\views.py  (#2236)

* Added few Docstrings

* Updated with few changes.

* linter

---------

Signed-off-by: 0ssigeno <s.berni@certego.net>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Shivam Purohit <shivampurohit900@gmail.com>
Co-authored-by: Matteo Lodi <30625432+mlodic@users.noreply.github.com>
Co-authored-by: Daniele Rosetti <d.rosetti@certego.net>
Co-authored-by: 0ssigeno <s.berni@certego.net>
Co-authored-by: Martina Carella <m.carella@certego.net>
Co-authored-by: Daniele Rosetti <55402684+drosetti@users.noreply.github.com>
Co-authored-by: fgibertoni <152909479+fgibertoni@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Simone Berni <simone.berni2@studio.unibo.it>
Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com>
Co-authored-by: Shivam Purohit <shivampurohit900@gmail.com>
Co-authored-by: Your Name <you@example.com>

* fixes #1699 Permhash analyzer (#2258)

* added permhash analyzer and updated project-requirements.txt

* name change

* migrations

* changes

* update mimetypes and migration file

* update permhash

* fix migration issues

* raise AnalyzerRunException in perm_hash.py

* use mimetype instead of file extension

* added monkeypatch patches and changed permhash version from 0.1.4.2 to 0.1.4

* add permhash to free analyzers

* updated test_classes

 => added AndroidManifest.xml, manifest.json and sample.crx to
test_files.zip
 => added test cases for xml, json and crx in
tests/api_app/analyzers_manager/test_classes.py

* updated perm_hash.py

* added permhash to both free analyzers and static analyzers

* updated Usage.md

* updated migrations

* fix

* migration

* migrations

* migrations

---------

Co-authored-by: Matteo Lodi <30625432+mlodic@users.noreply.github.com>

* Bump pywatchman from 1.4.1 to 2.0.0 in /requirements (#2169)

Bumps [pywatchman](https://github.com/facebook/watchman) from 1.4.1 to 2.0.0.
- [Release notes](https://github.com/facebook/watchman/releases)
- [Commits](https://github.com/facebook/watchman/commits/v2.0)

---
updated-dependencies:
- dependency-name: pywatchman
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Added traefik switch to script (#2307)

* Removed depends on

Signed-off-by: 0ssigeno <s.berni@certego.net>

* Fixes Blint#2232 (#2257)

* blint

* report directory, code quality, docs

adjusts to default domain reputation visualizer + analyzers urls and abstractmethods (#2250)

* little adjusts

* adjust

* refactored base_url in url to enable healthchecks

* adjust

* added update abstract method

* added logging of intel_owl package

adjusted containers dependencies

Fix

Signed-off-by: 0ssigeno <s.berni@certego.net>

report directory, code quality, docs

adjusts to default domain reputation visualizer + analyzers urls and abstractmethods (#2250)

* little adjusts

* adjust

* refactored base_url in url to enable healthchecks

* adjust

* added update abstract method

* added logging of intel_owl package

adjusted containers dependencies

Fix

Signed-off-by: 0ssigeno <s.berni@certego.net>

RED tlp

* dict response, log remove

* cleanup

* migratiuons

* migrations

* code quality

* supportfiles

* updated blint

* updated python in ci

* repo_downloader_fix

* codeql

* fix migrations

* fix migrations

* cleaned code

* cleaned code

* fix

* try fix repo downloader

* don't work

---------

Co-authored-by: g4ze <bhaiyajionline@gmail.com>
Co-authored-by: Matteo Lodi <30625432+mlodic@users.noreply.github.com>

* adjusted JobIsRunningFlow (#2300)

* adjusted JobIsRunningFlow

* refactor

* deepsource

* adjusted test + permission edge case

* adjusted Update view

---------

Signed-off-by: 0ssigeno <s.berni@certego.net>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Shivam Purohit <shivampurohit900@gmail.com>
Co-authored-by: 0ssigeno <s.berni@certego.net>
Co-authored-by: Moon Patel <moonpatel2003@gmail.com>
Co-authored-by: Daniele Rosetti <d.rosetti@certego.net>
Co-authored-by: Martina Carella <m.carella@certego.net>
Co-authored-by: Daniele Rosetti <55402684+drosetti@users.noreply.github.com>
Co-authored-by: fgibertoni <152909479+fgibertoni@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Simone Berni <simone.berni2@studio.unibo.it>
Co-authored-by: code-review-doctor[bot] <72320148+code-review-doctor[bot]@users.noreply.github.com>
Co-authored-by: Shivam Purohit <shivampurohit900@gmail.com>
Co-authored-by: Cristina Ascari <95929371+cristinaascari@users.noreply.github.com>
Co-authored-by: IP2Location <support@ip2location.com>
Co-authored-by: suryapavan1611 <160897639+suryapavan1611@users.noreply.github.com>
Co-authored-by: Your Name <you@example.com>
Co-authored-by: Nilay Gupta <102874321+g4ze@users.noreply.github.com>
Co-authored-by: g4ze <bhaiyajionline@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@moonpatel moonpatel

Labels
new_analyzer
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@eshaan7 @mlodic @moonpatel