2016-02-13 18:19:27 +01:00
|
|
|
{
|
2017-02-13 11:18:42 +01:00
|
|
|
"name": "passive-dns",
|
|
|
|
|
"meta-category": "network",
|
|
|
|
|
"description": "Passive DNS records as expressed in draft-dulaunoy-dnsop-passive-dns-cof-01",
|
|
|
|
|
"version": 1,
|
|
|
|
|
"attributes": {
|
|
|
|
|
"rrtype": {
|
|
|
|
|
"misp-attribute": "text",
|
|
|
|
|
"misp-usage-frequency": 1,
|
|
|
|
|
"categories": [
|
|
|
|
|
"Network activity",
|
|
|
|
|
"External analysis"
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"rrname": {
|
|
|
|
|
"misp-attribute": "hostname",
|
|
|
|
|
"misp-usage-frequency": 1,
|
|
|
|
|
"categories": [
|
|
|
|
|
"Network activity",
|
|
|
|
|
"External analysis"
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"time_first": {
|
|
|
|
|
"misp-attribute": "datetime",
|
|
|
|
|
"misp-usage-frequency": 0
|
|
|
|
|
},
|
|
|
|
|
"time_last": {
|
|
|
|
|
"misp-attribute": "datetime",
|
|
|
|
|
"misp-usage-frequency": 0
|
|
|
|
|
},
|
|
|
|
|
"origin": {
|
|
|
|
|
"misp-attribute": "text",
|
|
|
|
|
"misp-usage-frequency": 0
|
|
|
|
|
},
|
|
|
|
|
"count": {
|
|
|
|
|
"misp-attribute": "counter",
|
|
|
|
|
"misp-usage-frequency": 0
|
|
|
|
|
},
|
|
|
|
|
"sensor_id": {
|
|
|
|
|
"misp-attribute": "text",
|
|
|
|
|
"misp-usage-frequency": 0
|
|
|
|
|
},
|
|
|
|
|
"bailiwick": {
|
|
|
|
|
"misp-attribute": "text",
|
|
|
|
|
"misp-usage-frequency": 0
|
|
|
|
|
},
|
|
|
|
|
"zone_time_first": {
|
|
|
|
|
"misp-attribute": "datetime",
|
|
|
|
|
"misp-usage-frequency": 0
|
|
|
|
|
},
|
|
|
|
|
"zone_time_last": {
|
|
|
|
|
"misp-attribute": "datetime",
|
|
|
|
|
"misp-usage-frequency": 0
|
|
|
|
|
},
|
|
|
|
|
"text": {
|
|
|
|
|
"misp-attribute": "text",
|
|
|
|
|
"misp-usage-frequency": 0
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
"required": [
|
|
|
|
|
"rrtype",
|
|
|
|
|
"rrname"
|
|
|
|
|
]
|
2016-02-13 18:19:27 +01:00
|
|
|
}
|
