Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create malware_bazzar_to_stix.py #270

Merged
merged 2 commits into from
Feb 14, 2025
Merged

Create malware_bazzar_to_stix.py #270

merged 2 commits into from
Feb 14, 2025

Conversation

santosomar
Copy link
Contributor

This pull request introduces a new script to generate STIX JSON documents from recent malware entries obtained from the Malware Bazaar API using OpenAI's models. The script retrieves the latest malware entries and converts them into STIX JSON documents.

Key changes include:

  • New Script Implementation:

    • Added a script threat_intelligence/malware_bazzar_to_stix.py to retrieve recent malware entries and generate STIX JSON documents using OpenAI's API.
    • Included functions to fetch recent malware entries (get_recent_malware_entries) and to generate STIX documents (generate_stix_document).
    • Added a main function to process the malware entries and save the generated STIX documents to files.
  • API Integration:

    • Integrated the Malware Bazaar API to fetch recent malware entries.
    • Utilized OpenAI's API to generate STIX 2.1 JSON documents from the fetched malware entries.

@santosomar santosomar self-assigned this Feb 14, 2025
@santosomar
Copy link
Contributor Author

This pull request introduces significant enhancements to the threat intelligence module, including the addition of a comprehensive README and a new script for generating STIX JSON documents from recent malware entries. The most important changes include the addition of detailed documentation, the integration of the OpenAI API for generating STIX documents, and the implementation of a script to retrieve and process malware data from the Malware Bazaar API.

Documentation improvements:

  • threat_intelligence/README.md: Added a detailed README explaining the importance of threat intelligence, its components, and valuable resources.

Script for generating STIX documents:

  • threat_intelligence/malware_bazzar_to_stix.py: Added a new script that demonstrates how to use OpenAI's models to generate STIX JSON documents from recent malware entries obtained from the Malware Bazaar API. This includes functions for retrieving recent malware entries, generating STIX documents using the OpenAI API, and saving the generated documents to files.

@santosomar santosomar merged commit 13eaa90 into master Feb 14, 2025
1 check passed
@santosomar santosomar deleted the malware_bazzar_to_stix branch February 14, 2025 23:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant