misp-objects/objects/microblog/definition.json

170 lines
4.6 KiB
JSON
Raw Normal View History

{
"attributes": {
"archive": {
"description": "Archive of the original document (Internet Archive, Archive.is, etc).",
"misp-attribute": "link",
"multiple": true,
"ui-priority": 1
},
"attachment": {
"description": "The microblog post file or screen capture.",
"misp-attribute": "attachment",
"multiple": true,
"ui-priority": 1
},
"creation-date": {
"description": "Initial creation of the microblog post",
"misp-attribute": "datetime",
"ui-priority": 0
},
"display-name": {
"description": "Display name of the account who posted the microblog.",
"misp-attribute": "text",
"ui-priority": 0
},
"embedded-link": {
"description": "Link into the microblog post",
"misp-attribute": "url",
"multiple": true,
"ui-priority": 0
},
"embedded-safe-link": {
"description": "Safe link into the microblog post",
"misp-attribute": "link",
"multiple": true,
"ui-priority": 0
},
"hashtag": {
"description": "Hashtag embedded in the microblog post",
"misp-attribute": "text",
"multiple": true,
"ui-priority": 0
},
"in-reply-to-display-name": {
"description": "The user display name of the microblog this post replies to.",
"misp-attribute": "text",
"multiple": true,
"ui-priority": 0
},
"in-reply-to-status-id": {
"description": "The microblog ID of the microblog this post replies to.",
"misp-attribute": "text",
"multiple": true,
"ui-priority": 0
},
"in-reply-to-user-id": {
"description": "The user ID of the microblog this post replies to.",
"misp-attribute": "text",
"multiple": true,
"ui-priority": 0
},
"language": {
"description": "The language of the post.",
"misp-attribute": "text",
"multiple": true,
"ui-priority": 0
},
"link": {
"description": "Original link to the microblog post (supposed harmless).",
"misp-attribute": "link",
"multiple": true,
"to_ids": false,
"ui-priority": 1
},
"modification-date": {
"description": "Last update of the microblog post",
"misp-attribute": "datetime",
"ui-priority": 0
},
"post": {
"description": "Raw text of the post.",
"misp-attribute": "text",
"ui-priority": 1
},
"removal-date": {
"description": "When the microblog post was removed.",
"misp-attribute": "datetime",
"ui-priority": 0
},
"state": {
"description": "State of the microblog post",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 0,
"values_list": [
"Informative",
"Malicious",
"Misinformation",
"Disinformation",
"Unknown"
]
},
"title": {
"description": "Title of the post.",
"misp-attribute": "text",
"ui-priority": 1
},
"twitter-id": {
"description": "The microblog post id.",
"misp-attribute": "twitter-id",
"multiple": true,
"ui-priority": 0
},
"type": {
"description": "Type of the microblog post",
"disable_correlation": true,
"misp-attribute": "text",
"sane_default": [
"Twitter",
"Facebook",
"LinkedIn",
"Reddit",
"Google+",
"Instagram",
"Forum",
"Other"
],
"ui-priority": 1
},
"url": {
"description": "Original URL of the microblog post (potentially malicious).",
"misp-attribute": "url",
"multiple": true,
"ui-priority": 1
},
"username": {
"description": "Username who posted the microblog post (without the @ prefix)",
"misp-attribute": "text",
"ui-priority": 0
},
"username-quoted": {
"description": "Username who are quoted in the microblog post.",
"misp-attribute": "text",
"multiple": true,
"ui-priority": 0
},
"verified-username": {
"description": "Is the username account verified by the operator of the microblog platform",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 0,
"values_list": [
"Verified",
"Unverified",
"Unknown"
]
2019-09-19 16:26:41 +02:00
}
},
"description": "Microblog post like a Twitter tweet or a post on a Facebook wall.",
"meta-category": "misc",
"name": "microblog",
"requiredOneOf": [
"post",
"archive",
"url",
"link",
"attachment"
],
"uuid": "8ec8c911-ddbe-4f5b-895b-fbff70c42a60",
"version": 20
}