Skip to content

v1.1.0 - 51 MITRE Techniques, VirusTotal Integration, TheHive Export

Latest

Choose a tag to compare

@notsointresting notsointresting released this 18 Jan 13:49

πŸš€ What's New in v1.1.0

⚑ Major Features

🎯 51 MITRE ATT&CK Techniques (was 21)

Expanded coverage across all 14 tactics including:

  • Collection (T1560, T1119, T1213)
  • Defense Evasion (T1562, T1036, T1218)
  • Impact (T1485, T1490, T1489)
  • And 30 more techniques!

πŸ” VirusTotal Integration

Enrich IOCs with threat intelligence (free tier):

alert2action alert.json --enrich --vt-key YOUR_API_KEY

πŸ“€ TheHive Export

Export directly to TheHive case format:

alert2action alert.json -o thehive > case.json

πŸ”§ Splunk CIM Support

Native support for 50+ Splunk Common Information Model fields.

πŸ“¦ Install / Update

npm install -g alert2action@1.1.0

Full Docs: https://github.com/notsointresting/alert2action#readme