misp-objects/relationships/definition.json

1079 lines
26 KiB
JSON
Raw Normal View History

{
2020-04-26 03:02:02 +02:00
"description": "Default type of relationships in MISP objects.",
"name": "relationships",
"uuid": "b002c0d6-320f-450d-82c4-b3aa15bbbd6c",
"values": [
{
"description": "The information in the target object is based on information from the source object.",
"format": [
"misp",
2018-10-22 18:19:47 +02:00
"stix-2.0",
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "derived-from"
},
2019-04-15 14:30:21 +02:00
{
"description": "This relationship describes an object which executes another object",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "executes"
2019-04-15 14:30:21 +02:00
},
{
"description": "The referenced source and target objects are semantically duplicates of each other.",
"format": [
"misp",
"stix-2.0"
2020-04-26 03:02:02 +02:00
],
"name": "duplicate-of"
},
{
"description": "The referenced source is related to the target object.",
"format": [
"alfred",
"followthemoney",
"misp",
"stix-2.0"
2020-04-26 03:02:02 +02:00
],
"name": "related-to"
},
{
"description": "The referenced source is connected to the target object.",
"format": [
"misp",
"stix-1.1"
2020-04-26 03:02:02 +02:00
],
"name": "connected-to"
},
2018-06-22 17:27:21 +02:00
{
"description": "The referenced source is connected from the target object.",
"format": [
"misp",
"stix-1.1"
2020-04-26 03:02:02 +02:00
],
"name": "connected-from"
2018-06-22 17:27:21 +02:00
},
{
2018-06-22 17:27:21 +02:00
"description": "The referenced source is containing the target object.",
"format": [
"misp",
2018-10-22 18:19:47 +02:00
"stix-1.1",
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "contains"
2018-06-22 17:27:21 +02:00
},
{
"description": "The referenced source is contained by the target object.",
"format": [
"misp",
"stix-1.1"
2020-04-26 03:02:02 +02:00
],
"name": "contained-by"
},
2018-06-22 17:27:21 +02:00
{
"description": "The referenced source is contained within the target object.",
"format": [
"misp",
"stix-1.1"
2020-04-26 03:02:02 +02:00
],
"name": "contained-within"
},
{
"description": "The referenced source is characterized by the target object.",
"format": [
"misp",
"stix-1.1"
2020-04-26 03:02:02 +02:00
],
"name": "characterized-by"
},
{
"description": "The referenced source is characterizing the target object.",
"format": [
"misp",
"stix-1.1"
2020-04-26 03:02:02 +02:00
],
"name": "characterizes"
},
{
"description": "The referenced source has queried the target object.",
"format": [
"misp",
"stix-1.1"
2020-04-26 03:02:02 +02:00
],
"name": "properties-queried"
},
{
"description": "The referenced source is queried by the target object.",
"format": [
"misp",
"stix-1.1"
2020-04-26 03:02:02 +02:00
],
"name": "properties-queried-by"
},
{
"description": "The referenced source is extracted from the target object.",
"format": [
"misp",
"stix-1.1"
2020-04-26 03:02:02 +02:00
],
"name": "extracted-from"
},
{
"description": "The referenced source is a supra domain of the target object.",
"format": [
"misp",
"stix-1.1"
2020-04-26 03:02:02 +02:00
],
"name": "supra-domain-of"
},
{
"description": "The referenced source is a sub domain of the target object.",
"format": [
"misp",
"stix-1.1"
2020-04-26 03:02:02 +02:00
],
"name": "sub-domain-of"
},
{
"description": "The referenced source has dropped the target object.",
"format": [
"misp",
"stix-1.1"
2020-04-26 03:02:02 +02:00
],
"name": "dropped"
},
{
"description": "The referenced source is dropped by the target object.",
"format": [
"misp",
"stix-1.1"
2020-04-26 03:02:02 +02:00
],
"name": "dropped-by"
},
{
"description": "The referenced source has downloaded the target object.",
"format": [
"misp",
"stix-1.1"
2020-04-26 03:02:02 +02:00
],
"name": "downloaded"
},
{
"description": "The referenced source has been downloaded from the target object.",
"format": [
"misp",
"stix-1.1"
2020-04-26 03:02:02 +02:00
],
"name": "downloaded-from"
},
{
"description": "The referenced source is resolved to the target object.",
"format": [
"misp",
"stix-1.1"
2020-04-26 03:02:02 +02:00
],
"name": "resolved-to"
},
{
"description": "This referenced source is attributed to the target object.",
"format": [
"misp",
"stix-2.0"
2020-04-26 03:02:02 +02:00
],
"name": "attributed-to"
},
{
"description": "This relationship describes that the source object targets the target object.",
"format": [
"misp",
"stix-2.0"
2020-04-26 03:02:02 +02:00
],
"name": "targets"
},
{
"description": "This relationship describes the use by the source object of the target object.",
"format": [
"misp",
2018-10-22 18:19:47 +02:00
"stix-2.0",
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "uses"
},
{
2018-09-04 16:15:08 +02:00
"description": "This relationship describes that the source object indicates the target object.",
"format": [
"misp",
"stix-2.0"
2020-04-26 03:02:02 +02:00
],
"name": "indicates"
},
{
"description": "This relationship describes that the source object mentions the target object.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "mentions"
},
{
"description": "This relationship describes a source object which mitigates the target object.",
"format": [
"misp",
"stix-2.0"
2020-04-26 03:02:02 +02:00
],
"name": "mitigates"
},
{
"description": "This relationship describes a source object which is a variant of the target object",
"format": [
"misp",
2018-10-22 18:19:47 +02:00
"stix-2.0",
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "variant-of"
},
{
2018-06-22 17:27:21 +02:00
"description": "This relationship describes a source object which impersonates the target object",
"format": [
"misp",
"stix-2.0"
2020-04-26 03:02:02 +02:00
],
"name": "impersonates"
},
2019-03-12 17:21:52 +01:00
{
"description": "This relationship describes an object retrieved from the target object.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "retrieved-from"
2019-03-12 17:21:52 +01:00
},
{
"description": "This relationship describes the author of a specific object.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "authored-by"
},
{
"description": "This relationship describes an object being author by someone.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "is-author-of"
},
{
"description": "This relationship describes the location (of any type) of a specific object.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "located"
},
{
"description": "This relationship describes an object included in another object.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "included-in"
},
2019-07-24 13:56:11 +02:00
{
"description": "This relationship describes an object that includes an other object.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "includes"
2019-07-24 13:56:11 +02:00
},
{
"description": "This relationship describes an object analysed by another object.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "analysed-with"
},
{
"description": "This relationship describes an object claimed by another object.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "claimed-by"
},
{
"description": "This relationship describes an object communicating with another object.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "communicates-with"
},
{
"description": "This relationship describes an object which drops another object",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "drops"
},
{
"description": "This relationship describes an object executed by another object.",
2017-08-23 17:17:56 +02:00
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "executed-by"
2017-08-23 17:17:56 +02:00
},
{
"description": "This relationship describes an object affected by another object.",
2017-08-23 17:17:56 +02:00
"format": [
2018-10-22 18:19:47 +02:00
"misp",
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "affects"
2017-08-23 17:17:56 +02:00
},
{
"description": "This relationship describes an object beaconing to another object.",
"format": [
2018-10-22 18:19:47 +02:00
"misp",
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "beacons-to"
2017-08-24 09:47:28 +02:00
},
{
"description": "This relationship describes an object which abuses another object.",
2017-08-24 09:47:28 +02:00
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "abuses"
2017-08-24 09:47:28 +02:00
},
{
"description": "This relationship describes an object exfiltrating to another object.",
2017-08-24 09:47:28 +02:00
"format": [
2018-10-22 18:19:47 +02:00
"misp",
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "exfiltrates-to"
2017-08-24 09:47:28 +02:00
},
{
"description": "This relationship describes an object which identifies another object.",
2017-08-24 09:47:28 +02:00
"format": [
2018-10-22 18:19:47 +02:00
"misp",
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "identifies"
2017-08-24 09:47:28 +02:00
},
{
"description": "This relationship describes an object which intercepts another object.",
2017-08-24 09:47:28 +02:00
"format": [
2018-10-22 18:19:47 +02:00
"misp",
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "intercepts"
2017-08-26 21:50:00 +02:00
},
{
"description": "This relationship describes an object which calls another objects.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "calls"
},
{
"description": "This relationship describes an object which is detected as another object.",
2017-08-26 21:50:00 +02:00
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "detected-as"
},
{
"description": "This relationship describes an object which is followed by another object. This can be used when a time reference is missing but a sequence is known.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "followed-by"
},
{
"description": "This relationship describes an object which is preceded by another object. This can be used when a time reference is missing but a sequence is known.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "preceding-by"
},
{
"description": "This relationship describes an object which triggers another object.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "triggers"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which is a vulnerability of another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "vulnerability-of"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which works like another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "works-like"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which is selling another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "seller-of"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which is selling on another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "seller-on"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which is trying to obtain the exploit described by another object",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "trying-to-obtain-the-exploit"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which is used by another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "used-by"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which is affiliated with another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "affiliated"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which is the alleged founder of another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "alleged-founder-of"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which attacks another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "attacking-other-group"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which belongs to another object.",
"format": [
"cert-eu",
"followthemoney"
2020-04-26 03:02:02 +02:00
],
"name": "belongs-to"
2017-10-26 15:40:53 +02:00
},
{
2017-10-26 15:52:36 +02:00
"description": "This relationship describes an object which has business relations with another object.",
2017-10-26 15:40:53 +02:00
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "business-relations"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which claims to be the founder of another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "claims-to-be-the-founder-of"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which cooperates with another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "cooperates-with"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which is a former member of another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "former-member-of"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which is a successor of another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "successor-of"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which has joined another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "has-joined"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which is a member of another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "member-of"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which is a primary member of another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "primary-member-of"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which is an administrator of another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "administrator-of"
2017-10-26 15:40:53 +02:00
},
{
2017-10-26 15:52:36 +02:00
"description": "This relationship describes an object which is in relation with another object,",
2017-10-26 15:40:53 +02:00
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "is-in-relation-with"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which provides support to another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "provide-support-to"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which is a regional branch of another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "regional-branch"
2017-10-26 15:40:53 +02:00
},
{
2017-10-26 15:52:36 +02:00
"description": "This relationship describes an object which is similar to another object.",
2017-10-26 15:40:53 +02:00
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "similar"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which is a subgroup of another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "subgroup"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which is suspected to be linked with another object.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "suspected-link"
2017-10-26 15:40:53 +02:00
},
{
"description": "This relationship describes an object which is the same as another object.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "same-as"
2017-10-27 14:07:46 +02:00
},
{
"description": "This relationship describes an object which is the creator of another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "creator-of"
2017-10-27 14:07:46 +02:00
},
{
"description": "This relationship describes an object which is a developer of another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "developer-of"
2017-10-27 14:07:46 +02:00
},
{
"description": "This relationship describes an object which uses another object for recon.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "uses-for-recon"
2017-10-27 14:07:46 +02:00
},
{
"description": "This relationship describes an object which is an operator of another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "operator-of"
2017-10-27 14:07:46 +02:00
},
{
"description": "This relationship describes an object which overlaps another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "overlaps"
2017-10-27 14:07:46 +02:00
},
{
"description": "This relationship describes an object which owns another object.",
"format": [
2018-10-22 18:19:47 +02:00
"cert-eu",
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "owner-of"
2017-10-27 14:07:46 +02:00
},
{
"description": "This relationship describes an object which publishes method for another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "publishes-method-for"
2017-10-27 14:07:46 +02:00
},
{
"description": "This relationship describes an object which recommends the use of another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "recommends-use-of"
2017-10-27 14:07:46 +02:00
},
{
"description": "This relationship describes an object which released source code of another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "released-source-code"
2017-10-27 14:07:46 +02:00
},
{
"description": "This relationship describes an object which release another object.",
"format": [
"cert-eu"
2020-04-26 03:02:02 +02:00
],
"name": "released"
2018-07-10 09:41:27 +02:00
},
{
2018-09-04 16:15:08 +02:00
"description": "This relationship describes an object (like a PoC/exploit) which exploits another object (such as a vulnerability object).",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "exploits"
2018-08-21 10:22:42 +02:00
},
{
"description": "This relationship describes an object signed by another object.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "signed-by"
},
{
"description": "This relationship describes an object by another object (such as exploit kit, dropper).",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "delivered-by"
},
{
"description": "This relationship describes an object which controls another object.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "controls"
},
{
"description": "This relationships describes an object which annotates another object.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "annotates"
},
{
"description": "This relationships describes an object which references another object or attribute.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "references"
2018-10-22 18:19:47 +02:00
},
{
"description": "A child semantic link to a parent.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "child-of"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of having compromised something.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "compromised"
2018-10-22 18:19:47 +02:00
},
{
"description": "The initiator of a connection.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "connects"
2018-10-22 18:19:47 +02:00
},
{
"description": "The destination or target of a connection.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "connects-to"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of one thing being the cover term for another.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "cover-term-for"
2018-10-22 18:19:47 +02:00
},
{
"description": "Semantic link indicating where information is disclosed to.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "disclosed-to"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of one thing downloading another.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "downloads"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of malware being downloaded from a location.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "downloads-from"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of an alert generated from a signature.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "generated"
2018-10-22 18:19:47 +02:00
},
{
"description": "One data object implements another.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "implements"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of a communication initiating an event.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "initiates"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link between a FILE and FILE_BINARY.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "instance-of"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of being the issuer of something.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "issuer-of"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of being associated with something.",
"format": [
"alfred",
"followthemoney"
2020-04-26 03:02:02 +02:00
],
"name": "linked-to"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of a comm that is not relevant to an EVENT.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "not-relevant-to"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link that defines one thing to be part of another in a hierachial structure from the child to the parent.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "part-of"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of something has been processed by another program.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "processed-by"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of something having produced something else.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "produced"
2018-10-22 18:19:47 +02:00
},
{
"description": "The IP Address or domain being queried for.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "queried-for"
2018-10-22 18:19:47 +02:00
},
{
"description": "The IP Address or domain returned as the result of a query.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "query-returned"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of someone registered some thing.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "registered"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of something being registered to.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "registered-to"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link between HBS Comms and communication addresses.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "relates"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of a comm that is relevant to an EVENT.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "relevant-to"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of resolving to something.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "resolves-to"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of some entity being responsible for something.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "responsible-for"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of a seeded domain redirecting to another site.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "seeded"
2018-10-22 18:19:47 +02:00
},
{
"description": "A sends semantic link meaning 'who sends what'.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "sends"
2018-10-22 18:19:47 +02:00
},
{
"description": "A sends to as BCC semantic link meaning 'what sends to who as BCC'.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "sends-as-bcc-to"
2018-10-22 18:19:47 +02:00
},
{
"description": "A sends to as CC semantic link meaning 'what sends to who as CC'.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "sends-as-cc-to"
2018-10-22 18:19:47 +02:00
},
{
"description": "A sends to semantic link meaning 'what sends to who'.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "sends-to"
2018-10-22 18:19:47 +02:00
},
{
"description": "The represents the semantic link of having spoofed something.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "spoofer-of"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents a domain being a subdomain of another.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "subdomain-of"
2018-10-22 18:19:47 +02:00
},
{
"description": "One data object supersedes another.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "supersedes"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of an alert triggered on an event.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "triggered-on"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of one thing uploading another.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "uploads"
2018-10-22 18:19:47 +02:00
},
{
"description": "The represents the semantic link of being the user of something.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "user-of"
2018-10-22 18:19:47 +02:00
},
{
"description": "Represents the semantic link of working for something.",
"format": [
"alfred"
2020-04-26 03:02:02 +02:00
],
"name": "works-for"
2018-12-21 20:50:12 +01:00
},
{
"description": "Represents an object being a witness of something.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "witness-of"
},
{
"description": "Represents an object injecting something into something",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "injects-into"
},
{
"description": "Represents an object which is injected something into something",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "injected-into"
2019-08-05 16:33:01 +02:00
},
2019-04-13 07:30:45 +02:00
{
"description": "Represents an object that creates something.",
"format": [
"misp",
"haxpak"
2020-04-26 03:02:02 +02:00
],
"name": "creates"
},
{
"description": "Represents an object being the screenshot of something.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "screenshot-of"
},
{
"description": "Represents an object having the knowledge of another object.",
"format": [
"misp"
2020-04-26 03:02:02 +02:00
],
"name": "knows"
},
{
"description": "owns",
"format": [
"followthemoney"
],
"name": "owns"
},
{
"description": "awarded to",
"format": [
"followthemoney"
],
"name": "awarded-to"
},
{
"description": "directs",
"format": [
"followthemoney"
],
"name": "directs"
},
{
"description": "involved in",
"format": [
"followthemoney"
],
"name": "involved-in"
},
{
"description": "associated with",
"format": [
"followthemoney"
],
"name": "associated-with"
},
{
"description": "represents",
"format": [
"followthemoney"
],
"name": "represents"
},
{
"description": "owes",
"format": [
"followthemoney"
],
"name": "owes"
},
{
"description": "preceeds",
"format": [
"followthemoney"
],
"name": "preceeds"
},
{
"description": "documents",
"format": [
"followthemoney"
],
"name": "documents"
},
{
"description": "paid",
"format": [
"followthemoney"
],
"name": "paid"
}
],
"version": 19
2020-04-26 03:02:02 +02:00
}