misp-objects/objects/passive-dns/definition.json

{
  "required": [
    "rrtype",
    "rrname"
  ],
  "attributes": {
    "zone_time_last": {
      "ui-priority": 0,
      "misp-attribute": "datetime"
    },
    "text": {
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "count": {
      "ui-priority": 0,
      "misp-attribute": "counter"
    },
    "rrname": {
      "categories": [
        "Network activity",
        "External analysis"
      ],
      "ui-priority": 1,
      "misp-attribute": "hostname"
    },
    "rrtype": {
      "categories": [
        "Network activity",
        "External analysis"
      ],
      "ui-priority": 1,
      "misp-attribute": "text"
    },
    "zone_time_first": {
      "ui-priority": 0,
      "misp-attribute": "datetime"
    },
    "origin": {
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "time_last": {
      "ui-priority": 0,
      "misp-attribute": "datetime"
    },
    "time_first": {
      "ui-priority": 0,
      "misp-attribute": "datetime"
    },
    "bailiwick": {
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "sensor_id": {
      "ui-priority": 0,
      "misp-attribute": "text"
    }
  },
  "version": 1,
  "description": "Passive DNS records as expressed in draft-dulaunoy-dnsop-passive-dns-cof-01",
  "meta-category": "network",
  "uuid": "b77b7b1c-66ab-4a41-8da4-83810f6d2d6c",
  "name": "passive-dns"
}