mirror of https://github.com/MISP/misp-objects
63 lines
1.4 KiB
JSON
63 lines
1.4 KiB
JSON
|
{
|
||
|
|
"required": [
|
||
|
|
"queried-domain"
|
||
|
|
],
|
||
|
|
"requiredOneOf": [
|
||
|
|
"a-record",
|
||
|
|
"mx-record",
|
||
|
|
"ns-record"
|
||
|
|
],
|
||
|
|
"attributes": {
|
||
|
|
"text": {
|
||
|
|
"description": "A description of the records",
|
||
|
|
"ui-priority": 1,
|
||
|
|
"misp-attribute": "text",
|
||
|
|
"recommended": false
|
||
|
|
},
|
||
|
|
"queried-domain": {
|
||
|
|
"description": "Domain name",
|
||
|
|
"categories": [
|
||
|
|
"Network activity",
|
||
|
|
"External analysis"
|
||
|
|
],
|
||
|
|
"ui-priority": 1,
|
||
|
|
"misp-attribute": "domain"
|
||
|
|
},
|
||
|
|
"a-record": {
|
||
|
|
"description": "IP Address sassociated with A Records",
|
||
|
|
"categories": [
|
||
|
|
"Network activity",
|
||
|
|
"External analysis"
|
||
|
|
],
|
||
|
|
"ui-priority": 1,
|
||
|
|
"misp-attribute": "ip-dst",
|
||
|
|
"multiple": true
|
||
|
|
},
|
||
|
|
"mx-record": {
|
||
|
|
"description": "Domain associated with MX Record",
|
||
|
|
"categories": [
|
||
|
|
"Network activity",
|
||
|
|
"External analysis"
|
||
|
|
],
|
||
|
|
"ui-priority": 1,
|
||
|
|
"misp-attribute": "domain",
|
||
|
|
"multiple": true
|
||
|
|
},
|
||
|
|
"ns-record": {
|
||
|
|
"description": "Domain associated with NS Records",
|
||
|
|
"categories": [
|
||
|
|
"Network activity",
|
||
|
|
"External analysis"
|
||
|
|
],
|
||
|
|
"ui-priority": 1,
|
||
|
|
"misp-attribute": "domain",
|
||
|
|
"multiple": true
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"version": 1,
|
||
|
|
"description": "A set of dns records observed for a specific domain.",
|
||
|
|
"meta-category": "network",
|
||
|
|
"uuid": "f023c8f0-81ab-41f3-9f5d-fa597a34a9b9",
|
||
|
|
"name": "dns-record"
|
||
|
|
}
|