misp-objects/objects/cortex-taxonomy/definition.json

{
  "attributes": {
    "cortex_url": {
      "description": "URL to the Cortex job",
      "disable_correlation": true,
      "misp-attribute": "link",
      "ui-priority": 0
    },
    "level": {
      "categories": [
        "External analysis"
      ],
      "description": "Cortex Taxonomy Level",
      "disable_correlation": true,
      "misp-attribute": "text",
      "multiple": false,
      "ui-priority": 1,
      "values_list": [
        "info",
        "safe",
        "suspicious",
        "malicious"
      ]
    },
    "namespace": {
      "categories": [
        "External analysis"
      ],
      "description": "Cortex Taxonomy Namespace",
      "disable_correlation": true,
      "misp-attribute": "text",
      "multiple": false,
      "ui-priority": 4
    },
    "predicate": {
      "categories": [
        "External analysis"
      ],
      "description": "Cortex Taxonomy Predicate",
      "disable_correlation": true,
      "misp-attribute": "text",
      "multiple": false,
      "ui-priority": 3
    },
    "value": {
      "categories": [
        "External analysis"
      ],
      "description": "Cortex Taxonomy Value",
      "disable_correlation": true,
      "misp-attribute": "text",
      "multiple": false,
      "ui-priority": 2
    }
  },
  "description": "Cortex object describing a Cortex Taxonomy (or mini report)",
  "meta-category": "misc",
  "name": "cortex-taxonomy",
  "required": [
    "namespace",
    "predicate",
    "value",
    "level"
  ],
  "uuid": "bef7d23b-e796-4d46-803a-32e317896894",
  "version": 6
}