mirror of https://github.com/MISP/MISP
Update Attribute.php
parent
c16eb6474e
commit
9f4dc4b0b8
|
@ -173,6 +173,8 @@ class Attribute extends AppModel {
|
|||
'windows-service-displayname' => array('desc' => 'A windows service\'s displayname, not to be confused with the windows-service-name. This is the name that applications will generally display as the service\'s name in applications.'),//x
|
||||
'whois-registrant-email' => array('desc' => 'The e-mail of a domain\'s registrant, obtained from the WHOIS information.'),//x
|
||||
'whois-registrant-phone' => array('desc' => 'The phone number of a domain\'s registrant, obtained from the WHOIS information.'),//x
|
||||
'whois-registar' => array('desc' => 'The registar of the domain, obtained from the WHOIS information.'),//x
|
||||
'whois-creation-date' => array('desc' => 'The date of domain\'s creation, obtained from the WHOIS information.'),//x
|
||||
'targeted-threat-index' => array('desc' => 'test'),
|
||||
'mailslot' => array('desc' => 'test'),
|
||||
'pipe' => array('desc' => 'test'),
|
||||
|
@ -225,7 +227,7 @@ class Attribute extends AppModel {
|
|||
),
|
||||
'Attribution' => array(
|
||||
'desc' => 'Identification of the group, organisation, or country behind the attack',
|
||||
'types' => array('threat-actor', 'campaign-name', 'campaign-id', 'whois-registrant-phone', 'whois-registrant-email', 'comment', 'text', 'other')
|
||||
'types' => array('threat-actor', 'campaign-name', 'campaign-id', 'whois-registrant-phone', 'whois-registrant-email', 'whois-registar', 'whois-creatre-date','comment', 'text', 'other')
|
||||
),
|
||||
'External analysis' => array(
|
||||
'desc' => 'Any other result from additional analysis of the malware like tools output',
|
||||
|
@ -756,6 +758,8 @@ class Attribute extends AppModel {
|
|||
case 'regkey|value':
|
||||
case 'filename':
|
||||
case 'windows-scheduled-task':
|
||||
case 'whois-registar':
|
||||
case 'whois-creation-date':
|
||||
// no newline
|
||||
if (!preg_match("#\n#", $value)) {
|
||||
$returnValue = true;
|
||||
|
|
Loading…
Reference in New Issue