https://github.com/EXC3L-ONE/synapse-malpedia

Synapse Rapid Power-Up for ingesting Malpedia malware and threat actor profiles
https://github.com/EXC3L-ONE/synapse-malpedia

Last synced: 6 days ago
JSON representation

Synapse Rapid Power-Up for ingesting Malpedia malware and threat actor profiles

• Host: GitHub
• URL: https://github.com/EXC3L-ONE/synapse-malpedia
• Owner: EXC3L-ONE
• License: mit
• Created: 2023-09-09T10:20:36.000Z (about 1 year ago)
• Default Branch: main
• Last Pushed: 2023-09-09T14:12:14.000Z (about 1 year ago)
• Last Synced: 2024-08-03T13:14:01.514Z (4 months ago)
• Size: 28.3 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# Synapse-Malpedia

This Synapse Rapid Power-up adds support for ingesting [Malpedia](https://malpedia.caad.fkie.fraunhofer.de/) malware and threat actor profiles as well as related indicators and news reports.

---

## Usage

There are 5 commands available: 

- `ex.malpedia.ingest.actors`

    - Ingest all threat actor profiles from Malpedia

- `ex.malpedia.ingest.malware`

    - Ingest all malware profiles from Malpedia

- `ex.malpedia.ingest.indicators`

    - Ingest all indicators from Malpedia

- `ex.malpedia.setup.apikey`

    - Setup Malpedia API key (only needed for indicator ingest)

- `ex.malpedia.setup.tagprefix`

    - Setup Malpedia tag prefix

---

## Installation

The easiest way to use this Power-Up is to load the JSON package into the Cortex by running: 

`pkg.load --raw "https://raw.githubusercontent.com/EXC3L-ONE/synapse-malpedia/main/synapse_malpedia.json"`

Alternatively, you can also clone this repo, and load the package via `python -m synapse.tools.genpkg` (see reference in Synapse docs [here](https://synapse.docs.vertex.link/en/latest/synapse/userguides/syn_tools_genpkg.html#building-the-example-package))