misp-objects/objects/tor-node/definition.json

{
  "attributes": {
    "address": {
      "description": "IP address of the Tor node seen.",
      "misp-attribute": "ip-src",
      "ui-priority": 1
    },
    "description": {
      "description": "Tor node description.",
      "disable_correlation": true,
      "misp-attribute": "text",
      "ui-priority": 1
    },
    "document": {
      "description": "Raw document from the consensus.",
      "disable_correlation": true,
      "misp-attribute": "text",
      "ui-priority": 0
    },
    "fingerprint": {
      "description": "router's fingerprint.",
      "disable_correlation": false,
      "misp-attribute": "text",
      "ui-priority": 0
    },
    "first-seen": {
      "description": "When the Tor node designed by the IP address has been seen for the first time.",
      "disable_correlation": true,
      "misp-attribute": "datetime",
      "ui-priority": 0
    },
    "flags": {
      "description": "list of flag associated with the node.",
      "misp-attribute": "text",
      "ui-priority": 0
    },
    "last-seen": {
      "description": "When the Tor node designed by the IP address has been seen for the last time.",
      "disable_correlation": true,
      "misp-attribute": "datetime",
      "ui-priority": 0
    },
    "nickname": {
      "description": "router's nickname.",
      "disable_correlation": false,
      "misp-attribute": "text",
      "ui-priority": 0
    },
    "published": {
      "description": "router's publication time. This can be different from first-seen and last-seen.",
      "disable_correlation": true,
      "misp-attribute": "datetime",
      "ui-priority": 0
    },
    "text": {
      "description": "Tor node comment.",
      "disable_correlation": true,
      "misp-attribute": "text",
      "ui-priority": 1
    },
    "version": {
      "description": "parsed version of tor, this is None if the relay's using a new versioning scheme.",
      "misp-attribute": "text",
      "ui-priority": 0
    },
    "version_line": {
      "description": "versioning information reported by the node.",
      "misp-attribute": "text",
      "ui-priority": 0
    }
  },
  "description": "Tor node (which protects your privacy on the internet by hiding the connection between users Internet address and the services used by the users) description which are part of the Tor network at a time.",
  "meta-category": "misc",
  "name": "tor-node",
  "required": [
    "address"
  ],
  "requiredOneOf": [
    "address",
    "first-seen",
    "last-seen",
    "description",
    "text"
  ],
  "uuid": "a5fde1c8-318e-4658-a3ea-85ea000bdd33",
  "version": 2
}