2016-02-08 15:09:46 +01:00
|
|
|
{
|
|
|
|
"name": "domain|ip",
|
2016-02-08 16:55:24 +01:00
|
|
|
"category": "network",
|
2016-02-08 15:09:46 +01:00
|
|
|
"description": "A domain and IP address seen as a tuple in a specific time frame.",
|
|
|
|
"version": 1,
|
2016-02-08 16:51:38 +01:00
|
|
|
"attributes" :
|
2016-02-08 15:09:46 +01:00
|
|
|
{
|
|
|
|
"ip": {
|
|
|
|
"misp-object": "ip-dst",
|
2016-02-08 16:51:38 +01:00
|
|
|
"misp-usage-frequency": 1,
|
|
|
|
"categories": ["Network activity","External analysis"]
|
2016-02-08 15:09:46 +01:00
|
|
|
},
|
|
|
|
"domain": {
|
|
|
|
"misp-object": "domain",
|
2016-02-08 16:51:38 +01:00
|
|
|
"misp-usage-frequency": 1,
|
|
|
|
"categories": ["Network activity","External analysis"]
|
2016-02-08 15:09:46 +01:00
|
|
|
},
|
|
|
|
"first-seen": {
|
|
|
|
"misp-object": "datetime",
|
|
|
|
"misp-usage-frequency": 0
|
|
|
|
},
|
|
|
|
"last-seen": {
|
|
|
|
"misp-object": "datetime",
|
|
|
|
"misp-usage-frequency": 0
|
|
|
|
}
|
|
|
|
|
|
|
|
},
|
2016-02-08 15:26:49 +01:00
|
|
|
"required": ["ip","domain"]
|
2016-02-08 15:09:46 +01:00
|
|
|
}
|