This Synapse Rapid Power-up adds support for ingesting Malpedia malware and threat actor profiles as well as related indicators and news reports.
There are 5 commands available:
ex.malpedia.ingest.actors- Ingest all threat actor profiles from Malpedia
ex.malpedia.ingest.malware- Ingest all malware profiles from Malpedia
ex.malpedia.ingest.indicators- Ingest all indicators from Malpedia
ex.malpedia.setup.apikey- Setup Malpedia API key (only needed for indicator ingest)
ex.malpedia.setup.tagprefix- Setup Malpedia tag prefix
The easiest way to use this Power-Up is to load the JSON package into the Cortex by running:
pkg.load --raw "https://raw.githubusercontent.com/EXC3L-ONE/synapse-malpedia/main/synapse_malpedia.json"
Alternatively, you can also clone this repo, and load the package via python -m synapse.tools.genpkg (see reference in Synapse docs here)