2017-10-12 22:08:09 +02:00
|
|
|
{
|
|
|
|
|
"requiredOneOf": [
|
|
|
|
|
"ticket-number"
|
|
|
|
|
],
|
|
|
|
|
"attributes": {
|
|
|
|
|
"classification": {
|
|
|
|
|
"description": "Classification of the RTIR ticket",
|
|
|
|
|
"ui-priority": 1,
|
|
|
|
|
"misp-attribute": "text",
|
|
|
|
|
"multiple": true
|
|
|
|
|
},
|
|
|
|
|
"ip": {
|
|
|
|
|
"description": "IPs automatically extracted from the RTIR ticket",
|
|
|
|
|
"ui-priority": 0,
|
|
|
|
|
"misp-attribute": "ip-dst",
|
|
|
|
|
"multiple": true
|
|
|
|
|
},
|
|
|
|
|
"constituency": {
|
|
|
|
|
"description": "Constituency of the RTIR ticket",
|
|
|
|
|
"ui-priority": 0,
|
|
|
|
|
"misp-attribute": "text"
|
|
|
|
|
},
|
|
|
|
|
"queue": {
|
|
|
|
|
"description": "Queue of the RTIR ticket",
|
|
|
|
|
"ui-priority": 0,
|
|
|
|
|
"misp-attribute": "text",
|
|
|
|
|
"sane_default": [
|
|
|
|
|
"incident",
|
|
|
|
|
"investigations",
|
|
|
|
|
"blocks",
|
|
|
|
|
"incident reports"
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"subject": {
|
|
|
|
|
"description": "Subject of the RTIR ticket",
|
|
|
|
|
"ui-priority": 0,
|
|
|
|
|
"misp-attribute": "text"
|
|
|
|
|
},
|
|
|
|
|
"status": {
|
|
|
|
|
"description": "Status of the RTIR ticket",
|
|
|
|
|
"ui-priority": 0,
|
|
|
|
|
"misp-attribute": "text",
|
|
|
|
|
"sane_default": [
|
|
|
|
|
"new",
|
|
|
|
|
"open",
|
|
|
|
|
"stalled",
|
|
|
|
|
"resolved",
|
|
|
|
|
"rejected",
|
|
|
|
|
"deleted"
|
2020-02-06 11:55:27 +01:00
|
|
|
],
|
|
|
|
|
"disable_correlation": true
|
2017-10-12 22:08:09 +02:00
|
|
|
},
|
|
|
|
|
"ticket-number": {
|
|
|
|
|
"description": "ticket-number of the RTIR ticket",
|
|
|
|
|
"ui-priority": 0,
|
|
|
|
|
"misp-attribute": "text"
|
|
|
|
|
}
|
|
|
|
|
},
|
2020-02-06 11:55:27 +01:00
|
|
|
"version": 2,
|
2017-10-12 22:08:09 +02:00
|
|
|
"description": "RTIR - Request Tracker for Incident Response",
|
|
|
|
|
"meta-category": "misc",
|
|
|
|
|
"uuid": "7534ee19-0a1f-4f46-a197-e6e73e457943",
|
|
|
|
|
"name": "rtir"
|
|
|
|
|
}
|
