2017-08-11 10:52:02 +02:00
|
|
|
{
|
2017-09-07 15:32:15 +02:00
|
|
|
"name": "relationships",
|
|
|
|
"uuid": "b002c0d6-320f-450d-82c4-b3aa15bbbd6c",
|
|
|
|
"description": "Default type of relationships in MISP objects.",
|
2017-08-11 10:52:02 +02:00
|
|
|
"values": [
|
|
|
|
{
|
2017-08-11 11:22:16 +02:00
|
|
|
"format": [
|
|
|
|
"misp",
|
|
|
|
"stix-2.0"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "The information in the target object is based on information from the source object.",
|
|
|
|
"name": "derived-from"
|
2017-08-11 10:52:02 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-11 11:22:16 +02:00
|
|
|
"format": [
|
|
|
|
"misp",
|
|
|
|
"stix-2.0"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "The referenced source and target objects are semantically duplicates of each other.",
|
|
|
|
"name": "duplicate-of"
|
2017-08-11 10:52:02 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-11 11:22:16 +02:00
|
|
|
"format": [
|
|
|
|
"misp",
|
|
|
|
"stix-2.0"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "The referenced source is related to the target object.",
|
|
|
|
"name": "related-to"
|
2017-08-11 10:52:02 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-11 11:22:16 +02:00
|
|
|
"format": [
|
|
|
|
"misp",
|
|
|
|
"stix-2.0"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This referenced source is attributed to the target object.",
|
|
|
|
"name": "attributed-to"
|
2017-08-11 10:52:02 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-11 11:22:16 +02:00
|
|
|
"format": [
|
|
|
|
"misp",
|
|
|
|
"stix-2.0"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes that the source object targets the target object.",
|
|
|
|
"name": "targets"
|
2017-08-11 10:52:02 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-11 11:22:16 +02:00
|
|
|
"format": [
|
|
|
|
"misp",
|
|
|
|
"stix-2.0"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes the use by the source object of the target object.",
|
|
|
|
"name": "uses"
|
2017-08-11 10:52:02 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-11 11:22:16 +02:00
|
|
|
"format": [
|
|
|
|
"misp",
|
|
|
|
"stix-2.0"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationships describes that the source object indicates the target object.",
|
|
|
|
"name": "indicates"
|
2017-08-11 10:52:02 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-11 11:22:16 +02:00
|
|
|
"format": [
|
|
|
|
"misp",
|
|
|
|
"stix-2.0"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes a source object which mitigates the target object.",
|
|
|
|
"name": "mitigates"
|
2017-08-11 10:52:02 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-11 11:22:16 +02:00
|
|
|
"format": [
|
|
|
|
"misp",
|
|
|
|
"stix-2.0"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes a source object which is a variant of the target object",
|
|
|
|
"name": "variant-of"
|
2017-08-11 10:52:02 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-11 11:22:16 +02:00
|
|
|
"format": [
|
|
|
|
"misp",
|
|
|
|
"stix-2.0"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describe a source object which impersonates the target object",
|
|
|
|
"name": "impersonates"
|
2017-08-11 10:52:02 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-11 11:22:16 +02:00
|
|
|
"format": [
|
|
|
|
"misp"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes the author of a specific object.",
|
|
|
|
"name": "authored-by"
|
2017-08-11 10:52:02 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-11 11:22:16 +02:00
|
|
|
"format": [
|
|
|
|
"misp"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes the location (of any type) of a specific object.",
|
|
|
|
"name": "located"
|
2017-08-11 10:52:02 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-11 11:22:16 +02:00
|
|
|
"format": [
|
|
|
|
"misp"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes an object included in another object.",
|
|
|
|
"name": "included-in"
|
2017-08-11 10:52:02 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-11 11:22:16 +02:00
|
|
|
"format": [
|
|
|
|
"misp"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes an object analysed by another object.",
|
|
|
|
"name": "analysed-with"
|
2017-08-11 10:52:02 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-11 11:22:16 +02:00
|
|
|
"format": [
|
|
|
|
"misp"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes an object claimed by another object.",
|
|
|
|
"name": "claimed-by"
|
2017-08-12 10:35:40 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-13 10:41:10 +02:00
|
|
|
"format": [
|
|
|
|
"misp"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes an object communicating with another object.",
|
|
|
|
"name": "communicates-with"
|
2017-08-13 10:41:10 +02:00
|
|
|
},
|
|
|
|
{
|
|
|
|
"format": [
|
|
|
|
"misp"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes an object dropped by another object.",
|
|
|
|
"name": "dropped-by"
|
2017-08-13 10:41:10 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-23 17:17:56 +02:00
|
|
|
"format": [
|
|
|
|
"misp"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes an object executed by another object.",
|
|
|
|
"name": "executed-by"
|
2017-08-23 17:17:56 +02:00
|
|
|
},
|
|
|
|
{
|
|
|
|
"format": [
|
|
|
|
"misp"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes an object affected by another object.",
|
|
|
|
"name": "affects"
|
2017-08-23 17:17:56 +02:00
|
|
|
},
|
|
|
|
{
|
2017-08-12 10:35:40 +02:00
|
|
|
"format": [
|
|
|
|
"misp"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes an object beaconing to another object.",
|
|
|
|
"name": "beacons_to"
|
2017-08-24 09:47:28 +02:00
|
|
|
},
|
|
|
|
{
|
|
|
|
"format": [
|
|
|
|
"misp"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes an object which abuses another object.",
|
|
|
|
"name": "abuses"
|
2017-08-24 09:47:28 +02:00
|
|
|
},
|
|
|
|
{
|
|
|
|
"format": [
|
|
|
|
"misp"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes an object exfiltrating to another object.",
|
|
|
|
"name": "exfiltrates_to"
|
2017-08-24 09:47:28 +02:00
|
|
|
},
|
|
|
|
{
|
|
|
|
"format": [
|
|
|
|
"misp"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes an object which identifies another object.",
|
|
|
|
"name": "identifies"
|
2017-08-24 09:47:28 +02:00
|
|
|
},
|
|
|
|
{
|
|
|
|
"format": [
|
|
|
|
"misp"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes an object which intercepts another object.",
|
|
|
|
"name": "intercepts"
|
2017-08-26 21:50:00 +02:00
|
|
|
},
|
|
|
|
{
|
2017-09-07 15:32:15 +02:00
|
|
|
"format": [
|
|
|
|
"misp"
|
|
|
|
],
|
2017-08-27 08:18:26 +02:00
|
|
|
"description": "This relationship describes an object which calls another objects.",
|
2017-09-07 15:32:15 +02:00
|
|
|
"name": "calls"
|
|
|
|
},
|
|
|
|
{
|
2017-08-26 21:50:00 +02:00
|
|
|
"format": [
|
|
|
|
"misp"
|
2017-09-07 15:32:15 +02:00
|
|
|
],
|
|
|
|
"description": "This relationship describes an object which is detected as another object.",
|
|
|
|
"name": "detected_as"
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"format": [
|
|
|
|
"misp"
|
|
|
|
],
|
|
|
|
"description": "This relationship describes an object which triggers another object.",
|
|
|
|
"name": "triggers"
|
2017-08-11 10:52:02 +02:00
|
|
|
}
|
|
|
|
],
|
2017-09-07 15:32:15 +02:00
|
|
|
"version": 9
|
2017-08-11 10:52:02 +02:00
|
|
|
}
|