misp-objects/objects/paste/definition.json

{
  "attributes": {
    "first-seen": {
      "description": "When the paste has been accessible or seen for the first time.",
      "disable_correlation": true,
      "misp-attribute": "datetime",
      "ui-priority": 0
    },
    "last-seen": {
      "description": "When the paste has been accessible or seen for the last time.",
      "disable_correlation": true,
      "misp-attribute": "datetime",
      "ui-priority": 0
    },
    "link": {
      "description": "Link to the original source of the source or post (when used legitimately for OSINT source or alike).",
      "misp-attribute": "link",
      "ui-priority": 0
    },
    "origin": {
      "description": "Original source of the paste or post.",
      "disable_correlation": true,
      "misp-attribute": "text",
      "ui-priority": 0,
      "values_list": [
        "pastebin.com",
        "pastebin.com_pro",
        "pastebin.fr",
        "pastie.org",
        "slexy.org",
        "gist.github.com",
        "codepad.org",
        "safebin.net",
        "hastebin.com",
        "ghostbin.com",
        "paste.ee",
        "0bin.net"
      ]
    },
    "paste": {
      "description": "Raw text of the paste or post",
      "misp-attribute": "text",
      "ui-priority": 1
    },
    "paste-file": {
      "description": "Content of the paste in file",
      "misp-attribute": "attachment",
      "ui-priority": 0
    },
    "title": {
      "description": "Title of the paste or post.",
      "misp-attribute": "text",
      "ui-priority": 0
    },
    "url": {
      "description": "Link to the original source of the paste or post (when used maliciously).",
      "misp-attribute": "url",
      "ui-priority": 0
    },
    "username": {
      "description": "User who posted the post.",
      "misp-attribute": "text",
      "ui-priority": 0
    }
  },
  "description": "Paste or similar post from a website allowing to share privately or publicly posts.",
  "meta-category": "misc",
  "name": "paste",
  "requiredOneOf": [
    "origin",
    "paste"
  ],
  "uuid": "cedc055c-78aa-49a4-bfd7-4cc30cecef12",
  "version": 6
}