mirror of https://github.com/MISP/misp-objects
34 lines
927 B
JSON
34 lines
927 B
JSON
|
{
|
||
|
|
"requiredOneOf": [
|
||
|
|
"message",
|
||
|
|
"datetime"
|
||
|
|
],
|
||
|
|
"attributes": {
|
||
|
|
"message": {
|
||
|
|
"description": "Informative message of the event",
|
||
|
|
"ui-priority": 0,
|
||
|
|
"misp-attribute": "text"
|
||
|
|
},
|
||
|
|
"timestamp": {
|
||
|
|
"description": "When the log entry was seen in microseconds since Unix epoch",
|
||
|
|
"ui-priority": 0,
|
||
|
|
"misp-attribute": "timestamp-microsec"
|
||
|
|
},
|
||
|
|
"timestamp_desc": {
|
||
|
|
"description": "Text explaining what type of timestamp is it",
|
||
|
|
"ui-priority": 0,
|
||
|
|
"misp-attribute": "text"
|
||
|
|
},
|
||
|
|
"datetime": {
|
||
|
|
"description": "When the log entry was seen",
|
||
|
|
"ui-priority": 0,
|
||
|
|
"misp-attribute": "datetime"
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"version": 2,
|
||
|
|
"description": "A timesketch timeline object based on mandatory field in timesketch to describe a log entry.",
|
||
|
|
"meta-category": "misc",
|
||
|
|
"uuid": "06db0221-cbc0-4ffc-ad98-7f34549310f1",
|
||
|
|
"name": "timesketch-timeline"
|
||
|
|
}
|