mirror of https://github.com/MISP/misp-galaxy
271 lines
8.3 KiB
JSON
271 lines
8.3 KiB
JSON
{
|
|
"UUIDS": {
|
|
"software": "38d62d8b-4c49-489a-9bc4-8e294c4f04f7",
|
|
"groups": "41c3e5c0-de5c-4edb-b48b-48cd8e7519e6",
|
|
"campaigns": "43a8fce6-08d3-46c2-957d-53606efe2c48",
|
|
"technique": "3e28b683-8159-4398-8729-7248eac9aa45",
|
|
"tactic": "16a396e2-a4a9-4dfd-be0a-6ba75fb5382c",
|
|
"references": "cf5e180f-26e9-42b2-b10c-c9e55f448750"
|
|
},
|
|
"GALAXY_CONFIGS": {
|
|
"software": {
|
|
"name": "Tidal Software",
|
|
"namespace": "tidal",
|
|
"description": "Tidal Software Galaxy",
|
|
"type": "software",
|
|
"uuid": ""
|
|
},
|
|
"groups": {
|
|
"name": "Tidal Groups",
|
|
"namespace": "tidal",
|
|
"description": "Tidal Groups Galaxy",
|
|
"type": "groups",
|
|
"uuid": ""
|
|
},
|
|
"campaigns": {
|
|
"name": "Tidal Campaigns",
|
|
"namespace": "tidal",
|
|
"description": "Tidal Campaigns Galaxy",
|
|
"type": "campaigns",
|
|
"uuid": ""
|
|
},
|
|
"technique": {
|
|
"name": "Tidal Technique",
|
|
"namespace": "tidal",
|
|
"description": "Tidal Technique Galaxy",
|
|
"type": "technique",
|
|
"uuid": ""
|
|
},
|
|
"tactic": {
|
|
"name": "Tidal Tactic",
|
|
"namespace": "tidal",
|
|
"description": "Tidal Tactic Galaxy",
|
|
"type": "tactics",
|
|
"uuid": ""
|
|
},
|
|
"references": {
|
|
"name": "Tidal References",
|
|
"namespace": "tidal",
|
|
"description": "Tidal References Galaxy",
|
|
"type": "references",
|
|
"uuid": ""
|
|
}
|
|
},
|
|
"CLUSTER_CONFIGS": {
|
|
"software": {
|
|
"authors": "Tidal",
|
|
"category": "Software",
|
|
"description": "Tidal Software Cluster",
|
|
"name": "Tidal Software",
|
|
"source": "Tidal",
|
|
"type": "software",
|
|
"uuid": "",
|
|
"values": []
|
|
},
|
|
"groups": {
|
|
"authors": "Tidal",
|
|
"category": "Threat Groups",
|
|
"description": "Tidal Threat Groups Cluster",
|
|
"name": "Tidal Threat Groups",
|
|
"source": "Tidal",
|
|
"type": "groups",
|
|
"uuid": "",
|
|
"values": []
|
|
},
|
|
"campaigns": {
|
|
"authors": "Tidal",
|
|
"category": "Campaigns",
|
|
"description": "Tidal Campaigns Cluster",
|
|
"name": "Tidal Campaigns",
|
|
"source": "Tidal",
|
|
"type": "campaigns",
|
|
"uuid": "",
|
|
"values": []
|
|
},
|
|
"technique": {
|
|
"authors": "Tidal",
|
|
"category": "Techniques",
|
|
"description": "Tidal Techniques Cluster",
|
|
"name": "Tidal Techniques",
|
|
"source": "Tidal",
|
|
"type": "technique",
|
|
"uuid": "",
|
|
"values": []
|
|
},
|
|
"tactic": {
|
|
"authors": "Tidal",
|
|
"category": "Tactics",
|
|
"description": "Tidal Tactics Cluster",
|
|
"name": "Tidal Tactics",
|
|
"source": "Tidal",
|
|
"type": "tactic",
|
|
"uuid": "",
|
|
"values": []
|
|
},
|
|
"references": {
|
|
"authors": "Tidal",
|
|
"category": "References",
|
|
"description": "Tidal References Cluster",
|
|
"name": "Tidal References",
|
|
"source": "Tidal",
|
|
"type": "references",
|
|
"uuid": "",
|
|
"values": []
|
|
}
|
|
},
|
|
"VALUE_FIELDS": {
|
|
"software": {
|
|
"description": "description",
|
|
"meta": {
|
|
"source": "source",
|
|
"type": "type",
|
|
"software-attack-id": "software_attack_id",
|
|
"platforms": {
|
|
"extract": "multiple",
|
|
"key": "platforms",
|
|
"subkey": "name"
|
|
},
|
|
"tags": {
|
|
"extract": "multiple",
|
|
"key": "tags",
|
|
"subkey": "tag"
|
|
},
|
|
"owner": "owner_name"
|
|
},
|
|
"related": {
|
|
"groups": {
|
|
"mode": "private",
|
|
"dest-uuid": "group_id",
|
|
"type": "used-by"
|
|
},
|
|
"associated_software": {
|
|
"mode": "private",
|
|
"dest-uuid": "id",
|
|
"type": "related-to"
|
|
}
|
|
},
|
|
"uuid": "id",
|
|
"value": "name"
|
|
},
|
|
"groups": {
|
|
"description": "description",
|
|
"meta": {
|
|
"source": "source",
|
|
"group-attack-id": "group_attack_id",
|
|
"country": {
|
|
"extract": "single",
|
|
"key": "country",
|
|
"subkey": "country_code"
|
|
},
|
|
"observed_country": {
|
|
"extract": "multiple",
|
|
"key": "observed_country",
|
|
"subkey": "country_code"
|
|
},
|
|
"observed_motivation": {
|
|
"extract": "multiple",
|
|
"key": "observed_motivation",
|
|
"subkey": "name"
|
|
},
|
|
"target-category": {
|
|
"extract": "multiple",
|
|
"key": "observed_sector",
|
|
"subkey": "name"
|
|
},
|
|
"tags": "tags",
|
|
"owner": "owner_name"
|
|
},
|
|
"related": {
|
|
"associated_groups": {
|
|
"mode": "private",
|
|
"dest-uuid": "id",
|
|
"type": "related-to"
|
|
}
|
|
},
|
|
"uuid": "id",
|
|
"value": "name"
|
|
},
|
|
"campaigns": {
|
|
"description": "description",
|
|
"meta": {
|
|
"source": "source",
|
|
"campaign-attack-id": "campaign_attack_id",
|
|
"first_seen": "first_seen",
|
|
"last_seen": "last_seen",
|
|
"tags": "tags",
|
|
"owner": "owner_name"
|
|
},
|
|
"related": {},
|
|
"uuid": "id",
|
|
"value": "name"
|
|
},
|
|
"technique": {
|
|
"description": "description",
|
|
"meta": {
|
|
"source": "source",
|
|
"platforms": {
|
|
"extract": "multiple",
|
|
"key": "platforms",
|
|
"subkey": "name"
|
|
},
|
|
"tags": {
|
|
"extract": "multiple",
|
|
"key": "tags",
|
|
"subkey": "tag"
|
|
},
|
|
"owner": "owner_name"
|
|
},
|
|
"related": {
|
|
"tactic": {
|
|
"mode": "public",
|
|
"dest-uuid": "tactic_id",
|
|
"type": "uses"
|
|
},
|
|
"sub_technique": {
|
|
"mode": "private",
|
|
"dest-uuid": "id",
|
|
"type": "sub-technique-of"
|
|
}
|
|
},
|
|
"uuid": "id",
|
|
"value": "name"
|
|
},
|
|
"tactic": {
|
|
"description": "description",
|
|
"meta": {
|
|
"source": "source",
|
|
"tactic-attack-id": "tactic_attack_id",
|
|
"ordinal_position": "ordinal_position",
|
|
"tags": "tags",
|
|
"owner": "owner_name"
|
|
},
|
|
"related": {
|
|
"techniques": {
|
|
"mode": "public",
|
|
"dest-uuid": "technique_id",
|
|
"type": "uses"
|
|
}
|
|
},
|
|
"uuid": "id",
|
|
"value": "name"
|
|
},
|
|
"references": {
|
|
"description": "description",
|
|
"meta": {
|
|
"source": "source",
|
|
"refs": {
|
|
"extract": "reverse",
|
|
"key": "url"
|
|
},
|
|
"owner": "owner_name",
|
|
"title": "title",
|
|
"author": "authors",
|
|
"date_accessed": "date_accessed",
|
|
"date_published": "date_published"
|
|
},
|
|
"related": {},
|
|
"uuid": "id",
|
|
"value": "name"
|
|
}
|
|
}
|
|
} |