misp-objects/objects/timesketch-timeline/definition.json

34 lines
927 B
JSON
Raw Normal View History

{
"requiredOneOf": [
"message",
"datetime"
],
"attributes": {
"message": {
"description": "Informative message of the event",
"ui-priority": 0,
"misp-attribute": "text"
},
"timestamp": {
"description": "When the log entry was seen in microseconds since Unix epoch",
"ui-priority": 0,
"misp-attribute": "timestamp-microsec"
},
"timestamp_desc": {
"description": "Text explaining what type of timestamp is it",
"ui-priority": 0,
"misp-attribute": "text"
},
"datetime": {
"description": "When the log entry was seen",
"ui-priority": 0,
"misp-attribute": "datetime"
}
},
"version": 2,
"description": "A timesketch timeline object based on mandatory field in timesketch to describe a log entry.",
"meta-category": "misc",
"uuid": "06db0221-cbc0-4ffc-ad98-7f34549310f1",
"name": "timesketch-timeline"
}