2016-09-27 19:47:22 +02:00
|
|
|
{
|
|
|
|
"$schema": "http://json-schema.org/draft-04/schema#",
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json",
|
|
|
|
"type": "object",
|
|
|
|
"properties": {
|
|
|
|
"Event": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event",
|
|
|
|
"type": "object",
|
|
|
|
"properties": {
|
|
|
|
"id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/id",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"orgc_id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/orgc_id",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"org_id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/org_id",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"date": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/date",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"threat_level_id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/threat_level_id",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"info": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/info",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"published": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/published",
|
|
|
|
"type": "boolean"
|
|
|
|
},
|
|
|
|
"uuid": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/uuid",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"attribute_count": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/attribute_count",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"analysis": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/analysis",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"timestamp": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/timestamp",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"distribution": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/distribution",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"proposal_email_lock": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/proposal_email_lock",
|
|
|
|
"type": "boolean"
|
|
|
|
},
|
|
|
|
"locked": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/locked",
|
|
|
|
"type": "boolean"
|
|
|
|
},
|
|
|
|
"publish_timestamp": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/publish_timestamp",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"sharing_group_id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/sharing_group_id",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"Org": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Org",
|
|
|
|
"type": "object",
|
|
|
|
"properties": {
|
|
|
|
"id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Org/id",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"name": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Org/name",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"uuid": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Org/uuid",
|
|
|
|
"type": "string"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"Orgc": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Orgc",
|
|
|
|
"type": "object",
|
|
|
|
"properties": {
|
|
|
|
"id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Orgc/id",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"name": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Orgc/name",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"uuid": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Orgc/uuid",
|
|
|
|
"type": "string"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"Attribute": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Attribute",
|
|
|
|
"type": "array",
|
|
|
|
"items": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Attribute/17",
|
|
|
|
"type": "object",
|
|
|
|
"properties": {
|
|
|
|
"id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Attribute/17/id",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"type": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Attribute/17/type",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"category": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Attribute/17/category",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"to_ids": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Attribute/17/to_ids",
|
|
|
|
"type": "boolean"
|
|
|
|
},
|
|
|
|
"uuid": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Attribute/17/uuid",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"event_id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Attribute/17/event_id",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"distribution": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Attribute/17/distribution",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"timestamp": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Attribute/17/timestamp",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"comment": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Attribute/17/comment",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"sharing_group_id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Attribute/17/sharing_group_id",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"value": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Attribute/17/value",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"SharingGroup": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Attribute/17/SharingGroup",
|
|
|
|
"type": "array",
|
|
|
|
"items": {},
|
|
|
|
"additionalItems": false
|
|
|
|
},
|
|
|
|
"ShadowAttribute": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Attribute/17/ShadowAttribute",
|
|
|
|
"type": "array",
|
|
|
|
"items": {},
|
|
|
|
"additionalItems": false
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"additionalItems": false
|
|
|
|
},
|
|
|
|
"ShadowAttribute": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/ShadowAttribute",
|
|
|
|
"type": "array",
|
|
|
|
"items": {},
|
|
|
|
"additionalItems": false
|
|
|
|
},
|
|
|
|
"RelatedEvent": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent",
|
|
|
|
"type": "array",
|
|
|
|
"items": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0",
|
|
|
|
"type": "object",
|
|
|
|
"properties": {
|
|
|
|
"Org": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Org",
|
|
|
|
"type": "object",
|
|
|
|
"properties": {
|
|
|
|
"id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Org/id",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"name": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Org/name",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"uuid": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Org/uuid",
|
|
|
|
"type": "string"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"Orgc": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Orgc",
|
|
|
|
"type": "object",
|
|
|
|
"properties": {
|
|
|
|
"id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Orgc/id",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"name": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Orgc/name",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"uuid": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Orgc/uuid",
|
|
|
|
"type": "string"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"Event": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Event",
|
2016-10-19 18:29:20 +02:00
|
|
|
"type": "object",
|
2016-09-27 19:47:22 +02:00
|
|
|
"items": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Event/0",
|
|
|
|
"type": "object",
|
|
|
|
"properties": {
|
|
|
|
"id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Event/0/id",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"date": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Event/0/date",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"threat_level_id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Event/0/threat_level_id",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"info": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Event/0/info",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"published": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Event/0/published",
|
|
|
|
"type": "boolean"
|
|
|
|
},
|
|
|
|
"uuid": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Event/0/uuid",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"analysis": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Event/0/analysis",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"timestamp": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Event/0/timestamp",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"distribution": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Event/0/distribution",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"org_id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Event/0/org_id",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"orgc_id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/RelatedEvent/0/Event/0/orgc_id",
|
|
|
|
"type": "string"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"additionalItems": false
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"additionalItems": false
|
|
|
|
},
|
|
|
|
"Tag": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Tag",
|
|
|
|
"type": "array",
|
|
|
|
"items": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Tag/2",
|
|
|
|
"type": "object",
|
|
|
|
"properties": {
|
|
|
|
"id": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Tag/2/id",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"name": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Tag/2/name",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"colour": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Tag/2/colour",
|
|
|
|
"type": "string"
|
|
|
|
},
|
|
|
|
"exportable": {
|
|
|
|
"id": "https://www.github.com/MISP/MISP/format/2.4/schema.json/Event/Tag/2/exportable",
|
|
|
|
"type": "boolean"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"additionalItems": false
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"required": [
|
2016-10-25 17:33:51 +02:00
|
|
|
"info"
|
2016-09-27 19:47:22 +02:00
|
|
|
]
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"required": [
|
|
|
|
"Event"
|
|
|
|
]
|
|
|
|
}
|