misp-objects/objects/cortex/definition.json

{
  "requiredOneOf": [
    "full"
  ],
  "attributes": {
    "summary": {
      "description": "Cortex summary object (summary) in JSON",
      "disable_correlation": false,
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "full": {
      "description": "Cortex report object (full report) in JSON",
      "disable_correlation": true,
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "start-date": {
      "description": "When the Cortex analyser was started",
      "disable_correlation": true,
      "ui-priority": 0,
      "misp-attribute": "datetime"
    },
    "name": {
      "description": "Cortex analyser/worker name",
      "disable_correlation": true,
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "server-name": {
      "description": "Name of the cortex server",
      "disable_correlation": true,
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "success": {
      "description": "Result of the cortex job",
      "disable_correlation": true,
      "ui-priority": 0,
      "misp-attribute": "boolean"
    }
  },
  "version": 1,
  "description": "Cortex object describing a complete cortex analysis. Observables would be attribute with a relationship from this object.",
  "meta-category": "misc",
  "uuid": "144988f3-fa00-4374-8015-c1a32092f451",
  "name": "cortex"
}