Skip to content

Commit

Permalink
Merge pull request #2436 from intelowlproject/develop
Browse files Browse the repository at this point in the history
* Fix phoneinfoga name

Signed-off-by: 0ssigeno <[email protected]>

* Start with --traefik/--traefik_local option. Closes #2305 (#2351)

* add traefik config and options for dev and prod

working config with traefik

finish traefik config prod/dev

add documentation

* Update traefik_local.override.yml - remove comment

* rework prod/local traefik and add deletion of get-docker.sh

* split traefik compose into base, prod and local

* remove print of compose files

* parent c45c84a
author David Mihajlovic <[email protected]> 1716908101 +0200
committer David Mihajlovic <[email protected]> 1717135119 +0200

add traefik config and options for dev and prod

working config with traefik

finish traefik config prod/dev

add documentation

Vulners#1257 (#2340)

* vulners

* vulners wrapper

* docs

* lesser variables

* migrations

* code quality

* migration

* code

---------

Co-authored-by: g4ze <[email protected]>

bump 6.0.3

updated docs

Bump django-ses from 4.0.0 to 4.1.0 in /requirements (#2342)

Bumps [django-ses](https://github.com/django-ses/django-ses) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/django-ses/django-ses/releases)
- [Changelog](https://github.com/django-ses/django-ses/blob/main/CHANGES.md)
- [Commits](django-ses/django-ses@v4.0.0...v4.1.0)

---
updated-dependencies:
- dependency-name: django-ses
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

rework prod/local traefik and add deletion of get-docker.sh

split traefik compose into base, prod and local

get-docker.sh deletion without sudo

change traefik compose naming

* remove unnecessary files

* remove print of compose files

* change doc

---------

Co-authored-by: Ubuntu <[email protected]>

* Fix url

Signed-off-by: 0ssigeno <[email protected]>

* Visualizer improvements (#2366)

* table visualizer improvements

* adjusted tests

* prettier

* changes

* fixed start script

* Split folder creation into two parts removing sudo (#2373)

* Bump elasticsearch-dsl from 8.13.0 to 8.14.0 in /requirements (#2370)

Bumps [elasticsearch-dsl](https://github.com/elasticsearch/elasticsearch-dsl-py) from 8.13.0 to 8.14.0.
- [Release notes](https://github.com/elasticsearch/elasticsearch-dsl-py/releases)
- [Changelog](https://github.com/elastic/elasticsearch-dsl-py/blob/main/Changelog.rst)
- [Commits](elastic/elasticsearch-dsl-py@v8.13.0...v8.14.0)

---
updated-dependencies:
- dependency-name: elasticsearch-dsl
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump quark-engine from 24.5.1 to 24.6.1 in /requirements (#2371)

Bumps [quark-engine](https://github.com/quark-engine/quark-engine) from 24.5.1 to 24.6.1.
- [Release notes](https://github.com/quark-engine/quark-engine/releases)
- [Commits](quark-engine/quark-engine@v24.5.1...v24.6.1)

---
updated-dependencies:
- dependency-name: quark-engine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Auto creation default test user with debug=true#1189 (#2369)

* create super user

* env files :p

---------

Co-authored-by: Matteo Lodi <[email protected]>
Co-authored-by: g4ze <[email protected]>

* Bump library/nginx from 1.26.0-alpine to 1.27.0-alpine in /docker (#2358)

Bumps library/nginx from 1.26.0-alpine to 1.27.0-alpine.

---
updated-dependencies:
- dependency-name: library/nginx
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump authlib from 1.3.0 to 1.3.1 in /requirements (#2368)

Bumps [authlib](https://github.com/lepture/authlib) from 1.3.0 to 1.3.1.
- [Release notes](https://github.com/lepture/authlib/releases)
- [Changelog](https://github.com/lepture/authlib/blob/master/docs/changelog.rst)
- [Commits](lepture/authlib@v1.3.0...v1.3.1)

---
updated-dependencies:
- dependency-name: authlib
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: Matteo Lodi <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* detect-it-easy analyzer, closes #1590 (#2354)

* die

* tweeks

* codefactor

* codefactor

* ypo

* gitignore

* typo fix

* detectiteasyyyyy

* tests

* supported files

* msdos

* logs, file support, soft t/o, poll

* migrate

* for all files

* docker_based_true

* params

* tests debug[1]

* Update api_app/analyzers_manager/migrations/0094_analyzer_config_detectiteasy.py

* Update api_app/analyzers_manager/file_analyzers/detectiteasy.py

---------

Co-authored-by: g4ze <[email protected]>
Co-authored-by: Matteo Lodi <[email protected]>

* Bi update (#2326)

* added bi document

* update bi interface

* update bi interface

* fix bi serializer

* update certego-saas version

* mign fix (#2375)

Co-authored-by: g4ze <[email protected]>

* watchman adjusts test (#2349)

* watchman adjusts test

* watchman right version

* test

* adjust

* right watchman version

* Malprob analyzer, closes #1521 (#2357)

* init

updates

works, weirdly

new flow

updates

tests

deepsrc

* tests

* disable_ratelimit(), t/o

* timeout,reform response,TLP:CLEAR,logs,no raise,disableRatelimit

* migrations

* reponse format

* t/o

* t/o(agn)

* api_key

* ratelimit,migrations,healthcheck

---------

Co-authored-by: g4ze <[email protected]>

* Passive_DNS playbook and visualizer (#2374)

* created 'passive_dns' playbook and visualizer

* dnsdb

* validin

* changes

* refactor

* changes

* refactor + tests

* changes

* changes

* Add create user docs (#2381)

* docs for test user creation

docs for test user creation

* typo :"(

---------

Co-authored-by: g4ze <[email protected]>

* fixed capesandbox short analysis time limit (#2364)

* fixed capesandbox short analysis time limit

* added url to soft time limit error

* fixed code doctor

* added update method

* added info installation process

* Orkl_search analyzer, closes #1274 (#2380)

* orkl search

* docs

* migrations

* free to use

* typo

---------

Co-authored-by: g4ze <[email protected]>

* Frontend - no more required analyzer in scan form (#2397)

* no more requried analyzer in scan form

* fix test

* removed bad migration

* Bump whitenoise from 6.6.0 to 6.7.0 in /requirements (#2396)

Bumps [whitenoise](https://github.com/evansd/whitenoise) from 6.6.0 to 6.7.0.
- [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst)
- [Commits](evansd/whitenoise@6.6.0...6.7.0)

---
updated-dependencies:
- dependency-name: whitenoise
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump greynoise from 2.1.0 to 2.2.0 in /requirements (#2389)

Bumps [greynoise](https://github.com/GreyNoise-Intelligence/pygreynoise) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/GreyNoise-Intelligence/pygreynoise/releases)
- [Changelog](https://github.com/GreyNoise-Intelligence/pygreynoise/blob/master/CHANGELOG.rst)
- [Commits](GreyNoise-Intelligence/pygreynoise@v2.1.0...v2.2.0)

---
updated-dependencies:
- dependency-name: greynoise
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* crtsh (#2379)

crt_sh

Passive_DNS playbook and visualizer (#2374)

* created 'passive_dns' playbook and visualizer

* dnsdb

* validin

* changes

* refactor

* changes

* refactor + tests

* changes

* changes

Add create user docs (#2381)

* docs for test user creation

docs for test user creation

* typo :"(

---------

Co-authored-by: g4ze <[email protected]>

fixed capesandbox short analysis time limit (#2364)

* fixed capesandbox short analysis time limit

* added url to soft time limit error

* fixed code doctor

* added update method

added info installation process

Orkl_search analyzer, closes #1274 (#2380)

* orkl search

* docs

* migrations

* free to use

* typo

---------

Co-authored-by: g4ze <[email protected]>

Frontend - no more required analyzer in scan form (#2397)

* no more requried analyzer in scan form

* fix test

docs, migrations and corrections

ci

Co-authored-by: g4ze <[email protected]>
Co-authored-by: Matteo Lodi <[email protected]>

* Added external link to output (#2399)

* Fixed load_env() parsing of .env files (#2400)

* Spamhaus_WQS Analyzer, closes #1526 (#2378)

* init

* init

* migration

* docs

* python

* better code

* code handling and migrations

* better code

* docs link

* docs link

---------

Co-authored-by: g4ze <[email protected]>

* Pdf uri extractor and pivoting (#2391)

* uri extraction

* added download file analyzer and pivot configs

* fixed code review doctor

* made code review changes

added job creation check to avoid graph related issues

* added abstract update method

* fixed migration order

* fixed validated_data dict access

* fixed migrations order

* fixed migrations order

* Malware bazaar ingestor (#2259)

* added malware bazaar ingestor

fixed json serialization for types: bytes and File

* typo

* added support to delayed celery jobs startup for ingestors

* moved url to config parameter

in this way you can set an health checker if you want

* fixed wrong access to observable name

* changed timedelta from class to object

* added _monkeypatch()

* omitted full_name field and generate ingestors plugin config

* added threatfox url migration

* fixed linter

* fixed linter

* fixed linter

* fixed linter

* fixed linter

* fixed linter

* fixed linter

* fixed linter

* updated threatfox migration

* changed migration order

* fixed reverse migrations

* fixed default signatures

* fixed default signatures

* added malware bazaar userprofile

fixed threatfox migration

* isort

* added default value to timedelta

* fixed delay parameter default value and int conversion

* fixed userprofile dumpplugin

* reduced code complexity and fixed generator job creation

* fixed deepsource warnings

* fixed deepsoruce cyclic import

* changed order PivotConfigurationException

* made code review changes

* fixed errors

* fixed errors

* fixed empty analyzer report

* Adguard dns analyzer, closes #1361 (#2363)

* adguard

* adguard

* bad query

* tests

* adguard works now :p

* adguard

* docs+mign

* ci

* ci

* ci

* tests

* ci

* ci

* playbook

* ci try

* ci try

* mign

* mign

---------

Co-authored-by: g4ze <[email protected]>

* Fix ingestor (#2405)

* Update Usage.md

* disabled ingestors by default

* fixed migration ingestors (#2406)

* ja4db analyzer, closes #2361  (#2402)

* adguard

* adguard

* bad query

* ja4db

* ci fixes

* ci fix

* ci fix

* ci

* cro tests

* tests

* adguard works now :p

* adguard

* docs+mign

* ci

* ci

* ci

* tests

* ci

* ci

* playbook

* ci try

* ci try

* mign

* mign

* mign upate

* checks and amber

* more precise

* little refactor

* added docstring

---------

Co-authored-by: g4ze <[email protected]>
Co-authored-by: Matteo Lodi <[email protected]>

* Goresym analyzer, fixes#1451 and fixes executable file support (#2401)

* file support

* goresym

* mign

* ci fix

* mign update

* file types

* file-types

* mign

* revert

* pass tests

* executable support

* params mign

* params add in run

* params

* tests

* test files

* tests

* fix

* fix

* ci

* tests files

* main.out for Goresym

* test files

* comment

* mign

* changes

* errorssss

* update

* conflict

* tests

---------

Co-authored-by: Matteo Lodi <[email protected]>
Co-authored-by: g4ze <[email protected]>

* Fix ingestor dump

Signed-off-by: 0ssigeno <[email protected]>

* Bump djangorestframework from 3.15.1 to 3.15.2 in /requirements (#2398)

Bumps [djangorestframework](https://github.com/encode/django-rest-framework) from 3.15.1 to 3.15.2.
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.15.1...3.15.2)

---
updated-dependencies:
- dependency-name: djangorestframework
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: Matteo Lodi <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump jsonschema from 4.22.0 to 4.23.0 in /requirements (#2409)

Bumps [jsonschema](https://github.com/python-jsonschema/jsonschema) from 4.22.0 to 4.23.0.
- [Release notes](https://github.com/python-jsonschema/jsonschema/releases)
- [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst)
- [Commits](python-jsonschema/jsonschema@v4.22.0...v4.23.0)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump quark-engine from 24.6.1 to 24.7.1 in /requirements (#2410)

Bumps [quark-engine](https://github.com/quark-engine/quark-engine) from 24.6.1 to 24.7.1.
- [Release notes](https://github.com/quark-engine/quark-engine/releases)
- [Commits](quark-engine/quark-engine@v24.6.1...v24.7.1)

---
updated-dependencies:
- dependency-name: quark-engine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump flake8 from 7.0.0 to 7.1.0 in /requirements (#2388)

Bumps [flake8](https://github.com/pycqa/flake8) from 7.0.0 to 7.1.0.
- [Commits](PyCQA/flake8@7.0.0...7.1.0)

---
updated-dependencies:
- dependency-name: flake8
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fix duplicated ingestor users (#2412)

* fix

* removed if condition and added defaults

* removed .title()

* fixed test due to .title() change

* fixed test due to .title() change

* Bump django from 4.2.11 to 4.2.14 in /requirements (#2415)

Bumps [django](https://github.com/django/django) from 4.2.11 to 4.2.14.
- [Commits](django/django@4.2.11...4.2.14)

---
updated-dependencies:
- dependency-name: django
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: Matteo Lodi <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Playbook choice for pivot and ingestor (#2411)

* As title

Signed-off-by: 0ssigeno <[email protected]>

* Blake

Signed-off-by: 0ssigeno <[email protected]>

* Fixes

Signed-off-by: 0ssigeno <[email protected]>

* Fix tests

Signed-off-by: 0ssigeno <[email protected]>

* Fixes

Signed-off-by: 0ssigeno <[email protected]>

* Fixes

Signed-off-by: 0ssigeno <[email protected]>

* Fixes

Signed-off-by: 0ssigeno <[email protected]>

* Fix migrations after rebase

Signed-off-by: 0ssigeno <[email protected]>

---------

Signed-off-by: 0ssigeno <[email protected]>

* Fix serializer

Signed-off-by: 0ssigeno <[email protected]>

* Fixes

Signed-off-by: 0ssigeno <[email protected]>

* Fix

Signed-off-by: 0ssigeno <[email protected]>

* Fix

Signed-off-by: 0ssigeno <[email protected]>

* Frontend - Replaced the time picker with a date picker (#2413)

* created TimePicker component + useTimePickerSore

* test

* fix

* Fix

Signed-off-by: 0ssigeno <[email protected]>

* updated frontend dependencies

* Speed up query

Signed-off-by: 0ssigeno <[email protected]>

* Leakix analyzer, closes#1256 (#2423)

* LeakIx

* tests

* lint

* fix tasks duplicates (#2424)

* fix tasks duplicates

* reformatted out of scope fie

* Apivoid analyzer, closes 1245 (#2428)

* apivoid

* tests

* tests

* qa

* qa

* qa

* tests

* Iocextract analyzer#1228 (#2426)

* iocextract

* iocextract

* iocextract

* ioc

* iocextract

* logs

* mign

* IocFinder Analyzer, closes #1229 (#2427)

* IocFinder

* bool

* mign

* mign

* spamhaus_drop analyzer, closes #2408 (#2422)

* spamhaus_drop

* spamhaus_drop

* ip matching

* migratiuons

* migrations

* tests

* tests

* tests

* tests

* tests

* tests

* IocFinder

* bool

* mign

* docs

* mign

* mign

* mign

* Criminalip analyzer closes#1240 (#2435)

* cip

* criminalip

* criminalip

* criminalip

* criminalip

* variables

* Bump checkdmarc from 5.3.1 to 5.4.0 in /requirements (#2433)

Bumps [checkdmarc](https://github.com/domainaware/checkdmarc) from 5.3.1 to 5.4.0.
- [Changelog](https://github.com/domainaware/checkdmarc/blob/master/CHANGELOG.md)
- [Commits](https://github.com/domainaware/checkdmarc/commits)

---
updated-dependencies:
- dependency-name: checkdmarc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump setuptools in /integrations/malware_tools_analyzers/requirements (#2416)

Bumps [setuptools](https://github.com/pypa/setuptools) from 67.6.0 to 70.0.0.
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v67.6.0...v70.0.0)

---
updated-dependencies:
- dependency-name: setuptools
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: Matteo Lodi <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Default value

Signed-off-by: 0ssigeno <[email protected]>

* Enable/disable admin actions

Signed-off-by: 0ssigeno <[email protected]>

* removed recaptcha (#2437)

* removed recaptcha

* removed useless import

* prettier

* removed env.js setup

* Criminalip_Scan analyzer closes#1240 (#2438)

* cip

* criminalip

* criminalip

* criminalip

* criminalip

* variables

* init

* tests

* mign

* fixes

* fixes

* mign

* mign

* mign

* mign

* mign

* adjusted investigation filters (#2440)

* adjusted investigation filters

* fixed 'playbook to execute' column

* fix

* fix deepsource

* Bump greynoise from 2.2.0 to 2.3.0 in /requirements (#2446)

Bumps [greynoise](https://github.com/GreyNoise-Intelligence/pygreynoise) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/GreyNoise-Intelligence/pygreynoise/releases)
- [Changelog](https://github.com/GreyNoise-Intelligence/pygreynoise/blob/master/CHANGELOG.rst)
- [Commits](GreyNoise-Intelligence/pygreynoise@v2.2.0...v2.3.0)

---
updated-dependencies:
- dependency-name: greynoise
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* job_id BI (#2449)

* added job_id field to bi

* removed name from JobBISerializer

* Polyswarm analyzer closes#1255 (#2439)

* polyswarm

* polyswarm

* polyswarm

* polyswarm

* polyswarm

* mign

* logs

* logs

* mign

* obs

* obs

* obs

* tests

* modular

* Knock analyzer  (#2448)

* knock

* migration

* knock but no deletion reqed

* t/o test

* rmv log

* timeout tests

* t/o

* mock

* mock

* tests

* tests

* t/o

* typo

* tlp

* pypi

* works now

* log

* mign

---------

Co-authored-by: g4ze <[email protected]>

* Fix triage (#2452)

* fix triage manage submission response

* fix

* Bump quark-engine from 24.7.1 to 24.8.1 in /requirements (#2459)

Bumps [quark-engine](https://github.com/quark-engine/quark-engine) from 24.7.1 to 24.8.1.
- [Release notes](https://github.com/quark-engine/quark-engine/releases)
- [Commits](quark-engine/quark-engine@v24.7.1...v24.8.1)

---
updated-dependencies:
- dependency-name: quark-engine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump polyswarm-api from 3.8.0 to 3.9.0 in /requirements (#2458)

Bumps [polyswarm-api](https://github.com/polyswarm/polyswarm-api) from 3.8.0 to 3.9.0.
- [Release notes](https://github.com/polyswarm/polyswarm-api/releases)
- [Commits](polyswarm/polyswarm-api@3.8.0...3.9.0)

---
updated-dependencies:
- dependency-name: polyswarm-api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump django-filter from 24.2 to 24.3 in /requirements (#2457)

Bumps [django-filter](https://github.com/carltongibson/django-filter) from 24.2 to 24.3.
- [Release notes](https://github.com/carltongibson/django-filter/releases)
- [Changelog](https://github.com/carltongibson/django-filter/blob/main/CHANGES.rst)
- [Commits](carltongibson/django-filter@24.2...24.3)

---
updated-dependencies:
- dependency-name: django-filter
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump dnstwist[full] from 20240116 to 20240812 in /requirements (#2456)

Bumps [dnstwist[full]](https://github.com/elceef/dnstwist) from 20240116 to 20240812.
- [Release notes](https://github.com/elceef/dnstwist/releases)
- [Commits](https://github.com/elceef/dnstwist/commits)

---
updated-dependencies:
- dependency-name: dnstwist[full]
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump elasticsearch-dsl from 8.14.0 to 8.15.0 in /requirements (#2455)

Bumps [elasticsearch-dsl](https://github.com/elasticsearch/elasticsearch-dsl-py) from 8.14.0 to 8.15.0.
- [Release notes](https://github.com/elasticsearch/elasticsearch-dsl-py/releases)
- [Changelog](https://github.com/elastic/elasticsearch-dsl-py/blob/main/Changelog.rst)
- [Commits](elastic/elasticsearch-dsl-py@v8.14.0...v8.15.0)

---
updated-dependencies:
- dependency-name: elasticsearch-dsl
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump django from 4.2.11 to 4.2.15 in /requirements (#2450)

Bumps [django](https://github.com/django/django) from 4.2.11 to 4.2.15.
- [Commits](django/django@4.2.11...4.2.15)

---
updated-dependencies:
- dependency-name: django
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: Matteo Lodi <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* updated blint

* removing documentation in favor of new doc repo

* removing documentation in favor of new doc repo

* update test-requirements and pr template

* chore: update pluginTableColumns.jsx (#2466)

fitler -> filter

Co-authored-by: Matteo Lodi <[email protected]>

* removed quotes

* get back images for the ReadME

* updated frontend dependencies

* Improved PE_info analyzer (#2464)

* update

* update

* init

* init

* blint fix

* black and flake8

* upgraded lief

* complexity

---------

Co-authored-by: Matteo Lodi <[email protected]>

* [WIP] Adding docstrings in IntelOwl Codebase. (#2430)

* Added docstrings in Authentication

Signed-off-by: aryan <[email protected]>

* Added docstrings in api_app module.

Signed-off-by: aryan <[email protected]>

* fixed linters

Signed-off-by: aryan <[email protected]>

---------

Signed-off-by: aryan <[email protected]>

* fixed frontend issues

* updated PR automation

* Bump django-iam-dbauth from 0.1.4 to 0.2.0 in /requirements (#2476)

Bumps [django-iam-dbauth](https://github.com/LabD/django-iam-dbauth) from 0.1.4 to 0.2.0.
- [Release notes](https://github.com/LabD/django-iam-dbauth/releases)
- [Changelog](https://github.com/labd/django-iam-dbauth/blob/main/CHANGES)
- [Commits](labd/django-iam-dbauth@0.1.4...0.2.0)

---
updated-dependencies:
- dependency-name: django-iam-dbauth
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump checkdmarc from 5.4.0 to 5.5.0 in /requirements (#2475)

Bumps [checkdmarc](https://github.com/domainaware/checkdmarc) from 5.4.0 to 5.5.0.
- [Changelog](https://github.com/domainaware/checkdmarc/blob/master/CHANGELOG.md)
- [Commits](https://github.com/domainaware/checkdmarc/commits)

---
updated-dependencies:
- dependency-name: checkdmarc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fixed wrong task deletion (#2477)

* email cc sender (#2468)

* email sender

Signed-off-by: 0ssigeno <[email protected]>

* Fix

Signed-off-by: 0ssigeno <[email protected]>

* Added case for list

Signed-off-by: 0ssigeno <[email protected]>

* Blake

Signed-off-by: 0ssigeno <[email protected]>

---------

Signed-off-by: 0ssigeno <[email protected]>

* removed obsolete docker compose version

* updated readme

* improved quad9 analyzers (#2453)

* improved quad9 analyzers

* fix

* Refactor old documentation link. (#2465)

* Refactor old documentation link.

Signed-off-by: Aryan Bhokare <[email protected]>

* fix prettier test

Signed-off-by: Aryan Bhokare <[email protected]>

* Fixed formatting

Signed-off-by: Aryan Bhokare <[email protected]>

* Improved PE_info analyzer (#2464)

* update

* update

* init

* init

* blint fix

* black and flake8

* upgraded lief

* complexity

---------

Co-authored-by: Matteo Lodi <[email protected]>

* Fixed flake8 errors.

Signed-off-by: Aryan Bhokare <[email protected]>

* [WIP] Adding docstrings in IntelOwl Codebase. (#2430)

* Added docstrings in Authentication

Signed-off-by: aryan <[email protected]>

* Added docstrings in api_app module.

Signed-off-by: aryan <[email protected]>

* fixed linters

Signed-off-by: aryan <[email protected]>

---------

Signed-off-by: aryan <[email protected]>

* fixed frontend issues

* updated PR automation

* Bump django-iam-dbauth from 0.1.4 to 0.2.0 in /requirements (#2476)

Bumps [django-iam-dbauth](https://github.com/LabD/django-iam-dbauth) from 0.1.4 to 0.2.0.
- [Release notes](https://github.com/LabD/django-iam-dbauth/releases)
- [Changelog](https://github.com/labd/django-iam-dbauth/blob/main/CHANGES)
- [Commits](labd/django-iam-dbauth@0.1.4...0.2.0)

---
updated-dependencies:
- dependency-name: django-iam-dbauth
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump checkdmarc from 5.4.0 to 5.5.0 in /requirements (#2475)

Bumps [checkdmarc](https://github.com/domainaware/checkdmarc) from 5.4.0 to 5.5.0.
- [Changelog](https://github.com/domainaware/checkdmarc/blob/master/CHANGELOG.md)
- [Commits](https://github.com/domainaware/checkdmarc/commits)

---
updated-dependencies:
- dependency-name: checkdmarc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* fixed wrong task deletion (#2477)

* email cc sender (#2468)

* email sender

Signed-off-by: 0ssigeno <[email protected]>

* Fix

Signed-off-by: 0ssigeno <[email protected]>

* Added case for list

Signed-off-by: 0ssigeno <[email protected]>

* Blake

Signed-off-by: 0ssigeno <[email protected]>

---------

Signed-off-by: 0ssigeno <[email protected]>

* removed obsolete docker compose version

* updated readme

* Refactor old documentation link.

Signed-off-by: Aryan Bhokare <[email protected]>

* fix prettier test

Signed-off-by: Aryan Bhokare <[email protected]>

* Fixed formatting

Signed-off-by: Aryan Bhokare <[email protected]>

* Fixed flake8 errors.

Signed-off-by: Aryan Bhokare <[email protected]>

* linters again

Signed-off-by: Aryan Bhokare <[email protected]>

---------

Signed-off-by: Aryan Bhokare <[email protected]>
Signed-off-by: aryan <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: 0ssigeno <[email protected]>
Co-authored-by: Nilay Gupta <[email protected]>
Co-authored-by: Matteo Lodi <[email protected]>
Co-authored-by: Daniele Rosetti <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Federico Fantini <[email protected]>
Co-authored-by: Simone Berni <[email protected]>

* misp fix: invalid json (#2481)

* fix1

* adjusted pymisp and upgraded

* update pymisp

---------

Co-authored-by: Matteo Lodi <[email protected]>

* updated readme

* Added docstrings in API_APP for api documentation (#2484)

Signed-off-by: aryan <[email protected]>

* mobsf (#2461)

* mobsf

* MobSF

* tests

* req:p

* typo:p

* extra file

* mign

* files

* seperate migns

* fix

* fixes

* no mock

* mock

* mock

* mock

* comments

* Droidlysis analyzer closes#1591 (#2454)

* droid

* droid

* droid

* config fixes

* config fixes

* fixes

* mobsf

* fixes

* MobSF

* tests

* req:p

* typo:p

* extra file

* mign

* files

* fixes

* mign

* test

* tests

* tests

* add imgs

* seperate migns

* fix

* fixes

* no mock

* mock

* mock

* mock

* mock

* comments

* comments

* comms

* mign

* merge conflict

* Bump pefile from 2023.2.7 to 2024.8.26 in /requirements (#2489)

Bumps [pefile](https://github.com/erocarrera/pefile) from 2023.2.7 to 2024.8.26.
- [Release notes](https://github.com/erocarrera/pefile/releases)
- [Commits](erocarrera/pefile@v2023.2.7...v2024.8.26)

---
updated-dependencies:
- dependency-name: pefile
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump django-silk from 5.1.0 to 5.2.0 in /requirements (#2487)

Bumps [django-silk](https://github.com/jazzband/django-silk) from 5.1.0 to 5.2.0.
- [Release notes](https://github.com/jazzband/django-silk/releases)
- [Changelog](https://github.com/jazzband/django-silk/blob/master/CHANGELOG.md)
- [Commits](jazzband/django-silk@5.1.0...5.2.0)

---
updated-dependencies:
- dependency-name: django-silk
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump django-celery-beat from 2.6.0 to 2.7.0 in /requirements (#2488)

Bumps [django-celery-beat](https://github.com/celery/django-celery-beat) from 2.6.0 to 2.7.0.
- [Release notes](https://github.com/celery/django-celery-beat/releases)
- [Changelog](https://github.com/celery/django-celery-beat/blob/main/Changelog)
- [Commits](celery/django-celery-beat@v2.6.0...v2.7.0)

---
updated-dependencies:
- dependency-name: django-celery-beat
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* apk artifacts analyzer closes#2444 + upgraded stringsifter (#2469)

* init

* init

* works

* docker

* comments

* apk_artifacts

* apk_artifacts

* file supp

---------

Signed-off-by: 0ssigeno <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: aryan <[email protected]>
Signed-off-by: Aryan Bhokare <[email protected]>
Co-authored-by: 0ssigeno <[email protected]>
Co-authored-by: David Mihajlovic <[email protected]>
Co-authored-by: Ubuntu <[email protected]>
Co-authored-by: Martina Carella <[email protected]>
Co-authored-by: Daniele Rosetti <[email protected]>
Co-authored-by: fgibertoni <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nilay Gupta <[email protected]>
Co-authored-by: g4ze <[email protected]>
Co-authored-by: Cristina Ascari <[email protected]>
Co-authored-by: Federico Fantini <[email protected]>
Co-authored-by: Simone Berni <[email protected]>
Co-authored-by: Daniele Rosetti <[email protected]>
Co-authored-by: Ikko Eltociear Ashimine <[email protected]>
Co-authored-by: Aryan Bhokare <[email protected]>
  • Loading branch information
16 people authored Aug 28, 2024
2 parents 6ec52e5 + d1ee5f1 commit 1f59928
Show file tree
Hide file tree
Showing 306 changed files with 17,442 additions and 7,960 deletions.
2 changes: 1 addition & 1 deletion .flake8
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
[flake8]
max-line-length = 88
max-line-length = 140
ignore =
W503,
E231,
Expand Down
97 changes: 53 additions & 44 deletions .github/CHANGELOG.md

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion .github/CONTRIBUTING.md
Original file line number Diff line number Diff line change
@@ -1 +1 @@
Please refer to https://intelowl.readthedocs.io/en/latest/Contribute.html
Please refer to https://intelowlproject.github.io/docs/IntelOwl/contribute/
18 changes: 9 additions & 9 deletions .github/pull_request_template.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,22 +14,22 @@ Please delete options that are not relevant.

# Checklist

- [ ] I have read and understood the rules about [how to Contribute](https://intelowl.readthedocs.io/en/latest/Contribute.html) to this project
- [ ] I have read and understood the rules about [how to Contribute](https://intelowlproject.github.io/docs/IntelOwl/contribute/) to this project
- [ ] The pull request is for the branch `develop`
- [ ] A new plugin (analyzer, connector, visualizer, playbook, pivot or ingestor) was added or changed, in which case:
- [ ] I strictly followed the documentation ["How to create a Plugin"](https://intelowl.readthedocs.io/en/latest/Contribute.html#how-to-add-a-new-plugin)
- [ ] [Usage](https://github.com/intelowlproject/IntelOwl/blob/master/docs/source/Usage.md) file was updated.
- [ ] [Advanced-Usage](https://github.com/intelowlproject/IntelOwl/blob/master/docs/source/Advanced-Usage.md) was updated (in case the plugin provides additional optional configuration).
- [ ] I have dumped the configuration from Django Admin using the `dumpplugin` command and added it in the project as a data migration. (["How to share a plugin with the community"](https://intelowl.readthedocs.io/en/latest/Contribute.html#how-to-share-your-plugin-with-the-community))
- [ ] If a File analyzer was added and it supports a mimetype which is not already supported, you added a sample of that type inside the archive `test_files.zip` and you added the default tests for that mimetype in [test_classes.py](https://github.com/intelowlproject/IntelOwl/blob/master/tests/analyzers_manager/test_classes.py).
- [ ] If you created a new analyzer and it is free (does not require any API key), please add it in the `FREE_TO_USE_ANALYZERS` playbook by following [this guide](https://intelowl.readthedocs.io/en/latest/Contribute.html#how-to-modify-a-plugin).
- [ ] Check if it could make sense to add that analyzer/connector to other [freely available playbooks](https://intelowl.readthedocs.io/en/develop/Usage.html#list-of-pre-built-playbooks).
- [ ] I strictly followed the documentation ["How to create a Plugin"](https://intelowlproject.github.io/docs/IntelOwl/contribute/#how-to-add-a-new-plugin)
- [ ] [Usage](https://github.com/intelowlproject/docs/blob/main/docs/IntelOwl/usage.md) file was updated.
- [ ] [Advanced-Usage](https://github.com/intelowlproject/docs/blob/main/docs/IntelOwl/advanced_usage.md) was updated (in case the plugin provides additional optional configuration).
- [ ] I have dumped the configuration from Django Admin using the `dumpplugin` command and added it in the project as a data migration. (["How to share a plugin with the community"](https://intelowlproject.github.io/docs/IntelOwl/contribute/#how-to-share-your-plugin-with-the-community))
- [ ] If a File analyzer was added and it supports a mimetype which is not already supported, you added a sample of that type inside the archive `test_files.zip` and you added the default tests for that mimetype in [test_classes.py](https://github.com/intelowlproject/IntelOwl/blob/master/tests/api_app/analyzers_manager/test_classes.py).
- [ ] If you created a new analyzer and it is free (does not require any API key), please add it in the `FREE_TO_USE_ANALYZERS` playbook by following [this guide](https://intelowlproject.github.io/docs/IntelOwl/contribute/#how-to-modify-a-plugin).
- [ ] Check if it could make sense to add that analyzer/connector to other [freely available playbooks](https://intelowlproject.github.io/docs/IntelOwl/usage/#list-of-pre-built-playbooks).
- [ ] I have provided the resulting raw JSON of a finished analysis and a screenshot of the results.
- [ ] If the plugin interacts with an external service, I have created an attribute called precisely `url` that contains this information. This is required for Health Checks.
- [ ] If the plugin requires mocked testing, `_monkeypatch()` was used in its class to apply the necessary decorators.
- [ ] I have added that raw JSON sample to the `MockUpResponse` of the `_monkeypatch()` method. This serves us to provide a valid sample for testing.
- [ ] If external libraries/packages with restrictive licenses were used, they were added in the [Legal Notice](https://github.com/certego/IntelOwl/blob/master/.github/legal_notice.md) section.
- [ ] Linters (`Black`, `Flake`, `Isort`) gave 0 errors. If you have correctly installed [pre-commit](https://intelowl.readthedocs.io/en/latest/Contribute.html#how-to-start-setup-project-and-development-instance), it does these checks and adjustments on your behalf.
- [ ] Linters (`Black`, `Flake`, `Isort`) gave 0 errors. If you have correctly installed [pre-commit](https://intelowlproject.github.io/docs/IntelOwl/contribute/#how-to-start-setup-project-and-development-instance), it does these checks and adjustments on your behalf.
- [ ] I have added tests for the feature/bug I solved (see `tests` folder). All the tests (new and old ones) gave 0 errors.
- [ ] If changes were made to an existing model/serializer/view, the docs were updated and regenerated (check [CONTRIBUTE.md](https://github.com/intelowlproject/IntelOwl/blob/master/docs/source/Contribute.md)).
- [ ] If the GUI has been modified:
Expand Down
2 changes: 1 addition & 1 deletion .github/release_template.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

- [ ] (optional) If we changed/added Docker Analyzers, we need to configure Docker Hub / Dependabot properly.
- [ ] Update `CHANGELOG.md` for the new version
- [ ] Change version number in `docs/source/schema.yml` and `docker/.env`
- [ ] Change version number `docker/.env`
- [ ] Verify CI Tests
- [ ] Create release for the branch `develop`.
Write the following statement there (change the version number):
Expand Down
4 changes: 1 addition & 3 deletions .github/workflows/pull_request_automation.yml
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ jobs:
- name: Black formatter
run: |
black . --check --diff --exclude "migrations|venv"
black . --check --diff --exclude "migrations|venv|.ipython|docs_env|.cache"
- name: Lint with flake8 (PEP8 enforcer + linter)
run: |
Expand Down Expand Up @@ -87,7 +87,6 @@ jobs:
BUILDKIT_PROGRESS: "plain"
STAGE: "ci"
REPO_DOWNLOADER_ENABLED: false
WATCHMAN: false

- name: Startup script launch (Fast)
if: "!contains(github.base_ref, 'master')"
Expand All @@ -98,7 +97,6 @@ jobs:
BUILDKIT_PROGRESS: "plain"
STAGE: "ci"
REPO_DOWNLOADER_ENABLED: false
WATCHMAN: false

- name: Docker debug
if: always()
Expand Down
26 changes: 0 additions & 26 deletions .github/workflows/sphinx_build_on_release.yml

This file was deleted.

3 changes: 3 additions & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -45,3 +45,6 @@ coverage.xml
*.cover
.hypothesis/
/.env

# post run dev
integrations/malware_tools_analyzers/clamav/sigs
4 changes: 2 additions & 2 deletions .pre-commit-config.yaml
Original file line number Diff line number Diff line change
@@ -1,10 +1,10 @@
repos:
- repo: https://github.com/psf/black
rev: 23.7.0
rev: 24.8.0
hooks:
- id: black
- repo: https://github.com/PyCQA/flake8
rev: 6.1.0
rev: 7.1.1
hooks:
- id: flake8
- repo: https://github.com/pycqa/isort
Expand Down
24 changes: 0 additions & 24 deletions .readthedocs.yml

This file was deleted.

28 changes: 13 additions & 15 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
<img src="docs/static/intel_owl_positive.png" width=547 height=150 alt="Intel Owl"/>
<img src="static/intel_owl_positive.png" width=547 height=150 alt="Intel Owl"/>

[![GitHub release (latest by date)](https://img.shields.io/github/v/release/intelowlproject/IntelOwl)](https://github.com/intelowlproject/IntelOwl/releases)
[![GitHub Repo stars](https://img.shields.io/github/stars/intelowlproject/IntelOwl?style=social)](https://github.com/intelowlproject/IntelOwl/stargazers)
Expand Down Expand Up @@ -42,17 +42,17 @@ It provides:
- *playbooks* that are meant to make analysis easily repeatable


### Documentation [![Documentation Status](https://readthedocs.org/projects/intelowl/badge/?version=latest)](https://intelowl.readthedocs.io/en/latest/?badge=latest)
### Documentation
We try hard to keep our documentation well written, easy to understand and always updated.
All info about installation, usage, configuration and contribution can be found [here](https://intelowl.readthedocs.io/)
All info about installation, usage, configuration and contribution can be found [here](https://intelowlproject.github.io/docs/)

### Publications and Media

To know more about the project and its growth over time, you may be interested in reading [the official blog posts and/or videos about the project by clicking on this link](https://intelowl.readthedocs.io/en/latest/Introduction.html#publications-and-media)
To know more about the project and its growth over time, you may be interested in reading [the official blog posts and/or videos about the project by clicking on this link](https://intelowlproject.github.io/docs/IntelOwl/introduction/#publications-and-media)

### Available services or analyzers

You can see the full list of all available analyzers in the [documentation](https://intelowl.readthedocs.io/en/latest/Usage.html#available-analyzers).
You can see the full list of all available analyzers in the [documentation](https://intelowlproject.github.io/docs/IntelOwl/usage/#analyzers).

| Type | Analyzers Available |
| -------------------------------------------------- |-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
Expand All @@ -73,22 +73,22 @@ Because of this, we joined [Open Collective](https://opencollective.com/intelowl

#### Certego

<a href="https://certego.net/?utm_source=intelowl"> <img style="margin-right: 2px" width=250 height=71 src="docs/static/Certego.png" alt="Certego Logo"/></a>
<a href="https://certego.net/?utm_source=intelowl"> <img style="margin-right: 2px" width=250 height=71 src="static/Certego.png" alt="Certego Logo"/></a>

[Certego](https://certego.net/?utm_source=intelowl) is a MDR (Managed Detection and Response) and Threat Intelligence Provider based in Italy.

IntelOwl was born out of Certego's Threat intelligence R&D division and is constantly maintained and updated thanks to them.

#### The Honeynet Project

<a href="https://www.honeynet.org"> <img style="border: 0.2px solid black" width=125 height=125 src="docs/static/honeynet_logo.png" alt="Honeynet.org logo"> </a>
<a href="https://www.honeynet.org"> <img style="border: 0.2px solid black" width=125 height=125 src="static/honeynet_logo.png" alt="Honeynet.org logo"> </a>

[The Honeynet Project](https://www.honeynet.org) is a non-profit organization working on creating open source cyber security tools and sharing knowledge about cyber threats.

Thanks to Honeynet, we are hosting a public demo of the application [here](https://intelowl.honeynet.org). If you are interested, please contact a member of Honeynet to get access to the public service.

#### Google Summer of Code
<a href="https://summerofcode.withgoogle.com/"> <img style="border: 0.2px solid black" width=150 height=89 src="docs/static/gsoc_logo.png" alt="GSoC logo"> </a>
<a href="https://summerofcode.withgoogle.com/"> <img style="border: 0.2px solid black" width=150 height=89 src="static/gsoc_logo.png" alt="GSoC logo"> </a>

Since its birth this project has been participating in the [Google Summer of Code](https://summerofcode.withgoogle.com/) (GSoC)!

Expand All @@ -99,7 +99,7 @@ If you are interested in participating in the next Google Summer of Code, check

#### ThreatHunter.ai

<a href="https://threathunter.ai?utm_source=intelowl"> <img style="border: 0.2px solid black" width=194 height=80 src="docs/static/threathunter_logo.png" alt="ThreatHunter.ai logo"> </a>
<a href="https://threathunter.ai?utm_source=intelowl"> <img style="border: 0.2px solid black" width=194 height=80 src="static/threathunter_logo.png" alt="ThreatHunter.ai logo"> </a>

[ThreatHunter.ai®](https://threathunter.ai?utm_source=intelowl), is a 100% Service-Disabled Veteran-Owned Small Business started in 2007 under the name Milton Security Group. ThreatHunter.ai is the global leader in Dynamic Threat Hunting. Operating a true 24x7x365 Security Operation Center with AI/ML-enhanced human Threat Hunters, ThreatHunter.ai has changed the industry in how threats are found, and mitigated in real time. For over 15 years, our teams of Threat Hunters have stopped hundreds of thousands of threats and assisted organizations in defending against threat actors around the clock.

Expand All @@ -114,16 +114,14 @@ In 2021 IntelOwl joined the official [Docker Open Source Program](https://www.do
In 2022 IntelOwl joined the official [DigitalOcean Open Source Program](https://www.digitalocean.com/open-source?utm_medium=opensource&utm_source=IntelOwl).


### Other collaborations
* [LimaCharlie](https://limacharlie.io/blog/limacharlie-sponsors-intel-owl/?utm_source=intelowl&utm_medium=banner)
* [Tines](https://www.tines.com/blog/announcing-our-sponsorship-of-intel-owl?utm_source=oss&utm_medium=sponsorship&utm_campaign=intelowl)


## About the author and maintainers

Feel free to contact the main developers at any time on Twitter:

- [Matteo Lodi](https://twitter.com/matte_lodi): Author and principal maintainer
- [Simone Berni](https://twitter.com/0ssig3no): Backend Maintainer
- [Daniele Rosetti](https://github.com/drosetti): Frontend Maintainer
- [Eshaan Bansal](https://twitter.com/eshaan7_): Key Contributor
- [Eshaan Bansal](https://twitter.com/eshaan7_): Key Contributor

### Consultancy
IntelOwl's maintainers are available to offer [paid consultancy and mentorship](https://opencollective.com/intelowl-project).
41 changes: 37 additions & 4 deletions api_app/admin.py
Original file line number Diff line number Diff line change
@@ -1,8 +1,9 @@
# This file is a part of IntelOwl https://github.com/intelowlproject/IntelOwl
# See the file 'LICENSE' for copying permission.
from gettext import ngettext
from typing import Any

from django.contrib import admin
from django.contrib import admin, messages
from django.contrib.admin import widgets
from django.db.models import JSONField, ManyToManyField
from django.http import HttpRequest
Expand Down Expand Up @@ -69,10 +70,12 @@ class JobAdminView(CustomAdminView):
)
list_filter = ("status", "user", "tags")

def has_add_permission(self, request: HttpRequest) -> bool:
@staticmethod
def has_add_permission(request: HttpRequest) -> bool:
return False

def has_change_permission(self, request: HttpRequest, obj=None) -> bool:
@staticmethod
def has_change_permission(request: HttpRequest, obj=None) -> bool:
return False

@admin.display(description="Tags")
Expand Down Expand Up @@ -151,7 +154,8 @@ class AbstractReportAdminView(CustomAdminView):
def has_add_permission(request):
return False

def has_change_permission(self, request: HttpRequest, obj=None) -> bool:
@staticmethod
def has_change_permission(request: HttpRequest, obj=None) -> bool:
return False


Expand Down Expand Up @@ -193,6 +197,7 @@ class AbstractConfigAdminView(CustomAdminView):
list_filter = ("disabled",)
# allow to clone the object
save_as = True
actions = ["disable", "enable"]

@admin.display(description="Disabled in orgs")
def disabled_in_orgs(self, instance: AbstractConfig):
Expand All @@ -202,6 +207,34 @@ def disabled_in_orgs(self, instance: AbstractConfig):
)
)

def disable(self, request, queryset):
counter = queryset.update(disabled=True)
self.message_user(
request,
ngettext(
f"{counter} {queryset.model._meta.verbose_name} was disabled.",
f"{counter} {queryset.model._meta.verbose_name_plural} were disabled.",
counter,
),
messages.SUCCESS,
)

disable.short_description = "Disable configurations"

def enable(self, request, queryset):
counter = queryset.update(disabled=False)
self.message_user(
request,
ngettext(
f"{counter} {queryset.model._meta.verbose_name} was enabled.",
f"{counter} {queryset.model._meta.verbose_name_plural} were enabled.",
counter,
),
messages.SUCCESS,
)

enable.short_description = "Enable configurations"


class PythonConfigAdminView(AbstractConfigAdminView):
list_display = AbstractConfigAdminView.list_display + ("routing_key",)
Expand Down
4 changes: 2 additions & 2 deletions api_app/analyzers_manager/admin.py
Original file line number Diff line number Diff line change
Expand Up @@ -6,9 +6,9 @@
from api_app.analyzers_manager.models import AnalyzerConfig, AnalyzerReport


# flake8: noqa
@admin.register(AnalyzerReport)
class AnalyzerReportAdminView(AbstractReportAdminView):
...
class AnalyzerReportAdminView(AbstractReportAdminView): ...


@admin.register(AnalyzerConfig)
Expand Down
Loading

0 comments on commit 1f59928

Please sign in to comment.