2020-03-27 20:10:22 +01:00
|
|
|
{
|
|
|
|
|
"requiredOneOf": [
|
|
|
|
|
"attachment",
|
|
|
|
|
"archive",
|
|
|
|
|
"narrative-description"
|
|
|
|
|
],
|
|
|
|
|
"attributes": {
|
|
|
|
|
"5Ds-of-propaganda": {
|
|
|
|
|
"description": "5 D's of propaganda are tactics of rebuttal used to defend against criticism and adversarial narratives.",
|
|
|
|
|
"ui-priority": 1,
|
|
|
|
|
"misp-attribute": "text",
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"multiple": true,
|
|
|
|
|
"values_list": [
|
|
|
|
|
"dismiss",
|
|
|
|
|
"distort",
|
|
|
|
|
"distract",
|
|
|
|
|
"dismay",
|
|
|
|
|
"divide"
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"attachment": {
|
|
|
|
|
"description": "Documents related to the narrative.",
|
|
|
|
|
"ui-priority": 1,
|
|
|
|
|
"misp-attribute": "attachment"
|
|
|
|
|
},
|
|
|
|
|
"narrative-description": {
|
|
|
|
|
"description": "Raw text of narrative.",
|
|
|
|
|
"ui-priority": 1,
|
|
|
|
|
"misp-attribute": "text"
|
|
|
|
|
},
|
|
|
|
|
"crosspost": {
|
|
|
|
|
"description": "Safe site where the narrative has been posted.",
|
|
|
|
|
"ui-priority": 0,
|
|
|
|
|
"misp-attribute": "link",
|
|
|
|
|
"multiple": true
|
|
|
|
|
},
|
|
|
|
|
"crosspost-unsafe": {
|
|
|
|
|
"description": "Unsafe site where the narrative has been posted.",
|
|
|
|
|
"ui-priority": 0,
|
|
|
|
|
"misp-attribute": "url",
|
|
|
|
|
"multiple": true
|
|
|
|
|
},
|
|
|
|
|
"url": {
|
|
|
|
|
"description": "Original URL location of the narrative (potentially malicious)",
|
|
|
|
|
"ui-priority": 1,
|
|
|
|
|
"misp-attribute": "url"
|
|
|
|
|
},
|
|
|
|
|
"link": {
|
|
|
|
|
"description": "Original link into the narrative (Supposed harmless)",
|
|
|
|
|
"ui-priority": 1,
|
|
|
|
|
"misp-attribute": "link"
|
|
|
|
|
},
|
|
|
|
|
"archive": {
|
|
|
|
|
"description": "Archive of the original narrative source (Internet Archive, Archive.is, etc).",
|
|
|
|
|
"ui-priority": 1,
|
|
|
|
|
"multiple": true,
|
|
|
|
|
"misp-attribute": "link"
|
|
|
|
|
},
|
|
|
|
|
"objective": {
|
|
|
|
|
"description": "Objective of the narrative.",
|
|
|
|
|
"ui-priority": 1,
|
|
|
|
|
"misp-attribute": "text",
|
|
|
|
|
"disable_correlation": true,
|
|
|
|
|
"multiple": true,
|
|
|
|
|
"sane_default": [
|
|
|
|
|
"Disinformation",
|
|
|
|
|
"Advertising",
|
|
|
|
|
"Parody",
|
|
|
|
|
"Other"
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"last-seen": {
|
2020-03-27 20:46:31 +01:00
|
|
|
"description": "When the narrative has been accessible or seen for the last time.",
|
2020-03-27 20:10:22 +01:00
|
|
|
"disable_correlation": true,
|
|
|
|
|
"ui-priority": 0,
|
|
|
|
|
"misp-attribute": "datetime"
|
|
|
|
|
},
|
|
|
|
|
"first-seen": {
|
2020-03-27 20:46:31 +01:00
|
|
|
"description": "When the narrative has been accessible or seen for the first time.",
|
2020-03-27 20:10:22 +01:00
|
|
|
"disable_correlation": true,
|
|
|
|
|
"ui-priority": 0,
|
|
|
|
|
"misp-attribute": "datetime"
|
|
|
|
|
}
|
|
|
|
|
},
|
2020-03-27 20:46:31 +01:00
|
|
|
"version": 1,
|
2020-03-27 20:10:22 +01:00
|
|
|
"description": "Object describing a narrative.",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"uuid": "83bea299-514a-4719-a84b-f6fd0997fac1",
|
|
|
|
|
"name": "narrative"
|
|
|
|
|
}
|
