From 3f72ddb9cb6e837f359d3db96a087e531fdf996e Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Mon, 5 Feb 2018 16:49:10 +0100 Subject: [PATCH] add: identity-card-number attribute type to better support goAML --- app/Model/Attribute.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/app/Model/Attribute.php b/app/Model/Attribute.php index 55ed843f9..9dca989f6 100644 --- a/app/Model/Attribute.php +++ b/app/Model/Attribute.php @@ -132,6 +132,7 @@ class Attribute extends AppModel { 'stix2-pattern' => array('desc' => 'STIX 2 pattern', 'default_category' => 'Payload installation', 'to_ids' => 1), 'sigma' => array('desc' => 'Sigma - Generic Signature Format for SIEM Systems', 'default_category' => 'Payload installation', 'to_ids' => 1), 'gene' => array('desc' => 'GENE - Go Evtx sigNature Engine', 'default_category' => 'Artifacts dropped', 'to_ids' => 0), + 'identity-card-number' => array('desc' => 'Identity card number', 'default_category' => 'Person', 'to_ids' => 0), 'cookie' => array('desc' => 'HTTP cookie as often stored on the user web client. This can include authentication cookie or session cookie.', 'default_category' => 'Network activity', 'to_ids' => 0), 'vulnerability' => array('desc' => 'A reference to the vulnerability used in the exploit', 'default_category' => 'External analysis', 'to_ids' => 0), 'attachment' => array('desc' => 'Attachment with external information', 'formdesc' => "Please upload files using the Upload Attachment button.", 'default_category' => 'External analysis', 'to_ids' => 0), @@ -327,7 +328,7 @@ class Attribute extends AppModel { ), 'Person' => array( 'desc' => 'A human being - natural person', - 'types' => array('first-name', 'middle-name', 'last-name', 'date-of-birth', 'place-of-birth', 'gender', 'passport-number', 'passport-country', 'passport-expiration', 'redress-number', 'nationality', 'visa-number', 'issue-date-of-the-visa', 'primary-residence', 'country-of-residence', 'special-service-request', 'frequent-flyer-number', 'travel-details', 'payment-details', 'place-port-of-original-embarkation', 'place-port-of-clearance', 'place-port-of-onward-foreign-destination', 'passenger-name-record-locator-number', 'comment', 'text', 'other', 'phone-number') + 'types' => array('first-name', 'middle-name', 'last-name', 'date-of-birth', 'place-of-birth', 'gender', 'passport-number', 'passport-country', 'passport-expiration', 'redress-number', 'nationality', 'visa-number', 'issue-date-of-the-visa', 'primary-residence', 'country-of-residence', 'special-service-request', 'frequent-flyer-number', 'travel-details', 'payment-details', 'place-port-of-original-embarkation', 'place-port-of-clearance', 'place-port-of-onward-foreign-destination', 'passenger-name-record-locator-number', 'comment', 'text', 'other', 'phone-number', 'identity-card-number') ), 'Other' => array( 'desc' => 'Attributes that are not part of any other category or are meant to be used as a component in MISP objects in the future', @@ -1029,6 +1030,7 @@ class Attribute extends AppModel { case 'stix2-pattern': case 'sigma': case 'gene': + case 'identity-card-number': case 'cookie': case 'attachment': case 'malware-sample':