misp-objects/objects/victim/definition.json

84 lines
2.1 KiB
JSON
Raw Normal View History

{
"requiredOneOf": [
"name"
],
"attributes": {
"description": {
"description": "Description of the victim",
"ui-priority": 1,
"misp-attribute": "text"
},
"name": {
"description": "The name of the victim targeted. The name can be an organisation or a group of organisations.",
"ui-priority": 1,
"misp-attribute": "text"
},
"classification": {
"description": "The type of entity being targeted.",
"misp-attribute": "text",
"disable_correlation": true,
"ui-priority": 1,
"sane_default": [
"individual",
"group",
"organization",
"class",
"unknown"
]
},
"roles": {
"description": "The list of roles targeted within the victim.",
"multiple": true,
"misp-attribute": "text",
"ui-priority": 1
},
"sectors": {
"description": "The list of sectors that the victim belong to",
"multiple": true,
"misp-attribute": "text",
"ui-priority": 1,
"sane_default": [
"agriculture",
"aerospace",
"automotive",
"communications",
"construction",
"defence",
"education",
"energy",
"engineering",
"entertainment",
"financial­services",
"government­national",
"government­regional",
"government­local",
"government­public­services",
"healthcare",
"hospitality­leisure",
"infrastructure",
"insurance",
"manufacturing",
"mining",
"non­profit",
"pharmaceuticals",
"retail",
"technology",
"telecommunications",
"transportation",
"utilities"
]
},
"regions": {
"description": "The list of regions or locations from the victim targeted. ISO 3166 should be used.",
"multiple": true,
"misp-attribute": "text",
"ui-priority": 1
}
},
"version": 2,
"description": "Victim object describes the target of an attack or abuse.",
"meta-category": "misc",
"uuid": "a8806e40-39ad-435f-be02-ac2a13d6fc7d",
"name": "victim"
}