Dataset of organisations

Fred-certeu commented 4 years ago

Like there is a data set of sectors and a data set of countries, it would be most helpful to have an initial and common data set of organisations. Even if the constituencies of opencti users are distinct, still, the main sources of opensource information are the same.

This could include:

a list of CSIRT / NCSC / LE (e.g. ANSSI, CERT-EU, NCSC-UK, CERT-Bund, Europol, FBI, etc)
a list of IT security vendors (Symantec, McAfee, Checkpoint, Kaspersky, FireEye, Trendmicro, Proofpoint, Cylance, Telsy, Recorded Future, BAE systems, ESET, Crowdstrike, FireEye, etc)
a list of IT security resources (Infosecurity, Bleeping computer, ZDnet, Security affairs, Threat post, malwarebytes, Alienvault, etc)
a list news papers or press agencies known to release articles on cyber threats (Reuters, The New York Tims, The Guardian, etc)

DocArmoryTech commented 3 years ago

The "Cerebrate project" would seem to satisfy some of the requirements outlined - would a "cerebrate-connector" to a cerebrate server suffice? or is the intention herein to have a downloadable, maintained, list of organisations ?

nor3th commented 3 years ago

Hey @Fred-certeu

I added a basic list of companies (https://github.com/nor3th/datasets/blob/company_list/raw/companies.csv) and converted it into a STIX file. I am still figuring out an ideal way of categorizing them before I merge this PR, but would be grateful for any input/feedback.

If you have any specific companies you would like me to add, just let me know. I'm more focusing at the moment on the structure of those companies than making sure every relevant company is present in that list.

Regards,

SamuelHassine commented 1 year ago

Done.

OpenCTI-Platform / datasets

Dataset of organisations #4