Generates DISARM as MISP Galaxy + a few fixes

[cvandeplas]

Following the conversation in issue #22 I made a script that generates DISARM as MISP Galaxy.
The script uses generate_DISARM_pages as library. Thanks for that, it made my life much easier !!!

This pull request also contains a few fixes for the generate_DISARM_pages library as it was not working with my panda's version. I also used the opportunity to fix a deprecation warning.

The result, as can be seen in MISP is :

[cvandeplas]

Ok, I had some fun and added more models: actortypes, countermeasures, detections, techniques

These are built around the ATT&CK style matrix, with multiple tabs/views:

And so on

The models are also interlinked with relationships bringing lots of opportunities for visualisation:

Currently issue #24 as there are techniques that have a non-unique name. It'd be great if that could be looked at short-term as this prevents full technical implementation.

[adulau]

Any plan for merging this contribution? That would help a lot of MISP users. Thank you.

[Wachizungu]

+1, this would help us a lot as well!

[scampb06]

Sorry, we've been super stretched. Thanks for all the work here and for fixing issues with the generate script. We just made a framework update.
To V1.4. Does that affect the MISP Galaxy change you made? Traveling this month. Will try to get to this at month's end.

[cvandeplas]

Thank you @scampb06 for the heads up.

v1.4 does not affect the MISP Galaxy structurally, so there are no changes needed in the generate_DISARM_MISP_galaxy.py scripts from this Pull Request.. You can find the delta for the MISP Galaxy here.

Eager to hear your input at the end of the month ! Travel safely.

[vibenas]

suggested changes:

1. in name to replace from names like "Countermeasures" to "DISARM Countermeasures",
2. in description to add particular galaxy name, for example "DISARM Countermeasures is part of DISARM framework designed for describing and understanding disinformation incidents."

That would increase clarity of reading and selecting galaxy items in MISP.

[cvandeplas]

Hi @scampb06 , I hope your travel all went smooth. Do you think it'd be possible to get to this in April? Thanks

[adulau]

Any news @scampb06 regarding this pull-request? Thank you very much

[scampb06]

Finally got to this, sorry it took so long. Thanks for the fixes, Christophe. Hadn't realized it was just a few places you changed the generate pages code, I should have done this months ago. Appreciate everything you and Alexandre do. Stephen.

[cvandeplas]

Thank you @scampb06 !