MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

ddos v5 - add destination domain attribute

pull/54/head
Deborah Servili 2017-11-23 14:43:04 +01:00
parent 56751a416e
commit 0051ad8167
1 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
objects/ddos/definition.json
View File

@ -3,7 +3,7 @@
"uuid": "e2f124d6-f57c-4f93-99e6-8450545fa05d", "uuid": "e2f124d6-f57c-4f93-99e6-8450545fa05d",
"meta-category": "network", "meta-category": "network",
"description": "DDoS object describes a current DDoS activity from a specific or/and to a specific target. Type of DDoS can be attached to the object as a taxonomy", "description": "DDoS object describes a current DDoS activity from a specific or/and to a specific target. Type of DDoS can be attached to the object as a taxonomy",
"version": 4, "version": 5,
"attributes": { "attributes": {
"total-bps": { "total-bps": {
"description": "Bits per second", "description": "Bits per second",
@ -15,8 +15,17 @@
"misp-attribute": "text", "misp-attribute": "text",
"ui-priority": 0 "ui-priority": 0
}, },
"domain-dst": {
"description": "Destination domain (victim)",
"misp-attribute": "domain",
"ui-priority": 1,
"categories": [
"Network activity",
"External analysis"
]
},
"ip-dst": { "ip-dst": {
"description": "Destination ID (victim)", "description": "Destination IP (victim)",
"misp-attribute": "ip-dst", "misp-attribute": "ip-dst",
"ui-priority": 1, "ui-priority": 1,
"categories": [ "categories": [
@ -80,6 +89,7 @@
}, },
"requiredOneOf": [ "requiredOneOf": [
"ip-dst", "ip-dst",
"ip-src" "ip-src",
"domain-dst"
] ]
} }