{ "Attribute": [ { "ShadowAttribute": [ { "Org": { "id": "1", "name": "CIRCL", "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f" }, "category": "Artifacts dropped", "comment": "", "disable_correlation": false, "event_id": "6676", "event_uuid": "5a4cb19a-f550-437f-bd29-48ed950d210f", "id": "3770", "old_id": "811578", "org_id": "1", "proposal_to_delete": false, "timestamp": "1514975846", "to_ids": true, "type": "filename", "uuid": "5a4cb1c7-fa84-45fa-8d27-4822950d210f", "value": "blah.exe.jpg" } ], "category": "Artifacts dropped", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "6676", "id": "811578", "object_id": "0", "sharing_group_id": "0", "timestamp": "1514975687", "to_ids": false, "type": "filename", "uuid": "5a4cb1c7-fa84-45fa-8d27-4822950d210f", "value": "blah.exe" } ], "Object": [ { "Attribute": [ { "ShadowAttribute": [ { "Org": { "id": "1", "name": "CIRCL", "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f" }, "category": "Payload delivery", "comment": "", "disable_correlation": false, "event_id": "6676", "event_uuid": "5a4cb19a-f550-437f-bd29-48ed950d210f", "id": "3771", "old_id": "811579", "org_id": "1", "proposal_to_delete": false, "timestamp": "1514976196", "to_ids": true, "type": "filename", "uuid": "5a4cb2b8-4748-4c72-96e6-4588950d210f", "value": "baz.png.exe" } ], "category": "Payload delivery", "comment": "", "deleted": false, "disable_correlation": false, "distribution": "5", "event_id": "6676", "id": "811579", "object_id": "2278", "object_relation": "filename", "sharing_group_id": "0", "timestamp": "1514975928", "to_ids": true, "type": "filename", "uuid": "5a4cb2b8-4748-4c72-96e6-4588950d210f", "value": "baz.png" }, { "category": "Other", "comment": "", "deleted": false, "disable_correlation": true, "distribution": "5", "event_id": "6676", "id": "811580", "object_id": "2278", "object_relation": "state", "sharing_group_id": "0", "timestamp": "1514975928", "to_ids": false, "type": "text", "uuid": "5a4cb2b9-92b4-4d3a-82df-4e86950d210f", "value": "Malicious" } ], "comment": "", "deleted": false, "description": "File object describing a file with meta-information", "distribution": "5", "event_id": "6676", "id": "2278", "meta-category": "file", "name": "file", "sharing_group_id": "0", "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "8", "timestamp": "1514975928", "uuid": "5a4cb2b8-7958-4323-852c-4d2a950d210f" } ], "Org": { "id": "1", "name": "CIRCL", "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f" }, "Orgc": { "id": "1", "name": "CIRCL", "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f" }, "analysis": "2", "attribute_count": "3", "date": "2018-01-03", "disable_correlation": false, "distribution": "0", "event_creator_email": "raphael.vinot@circl.lu", "id": "6676", "info": "Test proposals / ShadowAttributes", "locked": false, "org_id": "1", "orgc_id": "1", "proposal_email_lock": true, "publish_timestamp": 0, "published": false, "sharing_group_id": "0", "threat_level_id": "1", "timestamp": "1514975929", "uuid": "5a4cb19a-f550-437f-bd29-48ed950d210f" }