anti 92632d7afd feat(pr2): HTTP/2+HTTP/3 fingerprint extractors — JA4H, H2 SETTINGS, JA4-QUIC

2026-05-10 00:47:19 -04:00

..

data

feat(ttp): add mitre_url_for + groups_using_technique helpers

2026-05-09 06:32:04 -04:00

impl

feat(pr2): HTTP/2+HTTP/3 fingerprint extractors — JA4H, H2 SETTINGS, JA4-QUIC

2026-05-10 00:47:19 -04:00

store

fix(ttp): /api/v1/ttp/rules returns the live rule catalogue

2026-05-02 01:54:06 -04:00

__init__.py

feat(ttp): E.1.3+E.1.4 Tagger ABC and composite factory contract

2026-05-01 06:20:10 -04:00

attack_catalog.py

feat(ttp): load MITRE ATT&CK from official STIX 2.1 bundle

2026-05-09 05:54:36 -04:00

attack_stix.py

feat(ttp): add mitre_url_for + groups_using_technique helpers

2026-05-09 06:32:04 -04:00

attack_version.py

feat(ttp): fetch + verify MITRE ATT&CK LICENSE alongside the bundle

2026-05-09 06:17:46 -04:00

base.py

feat(pr2): HTTP/2+HTTP/3 fingerprint extractors — JA4H, H2 SETTINGS, JA4-QUIC

2026-05-10 00:47:19 -04:00

factory.py

feat(pr2): HTTP/2+HTTP/3 fingerprint extractors — JA4H, H2 SETTINGS, JA4-QUIC

2026-05-10 00:47:19 -04:00

misp_export.py

feat(stix_export): wire fingerprint bounties through all endpoints + tests

2026-05-09 09:14:48 -04:00

stix_custom.py

feat(ttp): rich ThreatActor STIX extensions via CustomExtension + CustomObject

2026-05-09 08:52:19 -04:00

stix_export.py

feat(stix_export): HTTP quirks + JARM in protocol_fingerprints; characterizes SRO

2026-05-09 09:14:29 -04:00

worker.py

feat(ttp): fail-closed validation that lifter+UKC IDs resolve in ATT&CK bundle

2026-05-09 05:58:06 -04:00