diff --git a/README.md b/README.md index d4cbba3..f5a3099 100644 --- a/README.md +++ b/README.md @@ -115,6 +115,7 @@ for a specific attribute. * [objects/stix2-pattern](objects/stix2-pattern/definition.json) - An object describing a STIX pattern. The object can be linked via a relationship to other attributes or objects to describe how it can be represented as a STIX pattern. * [objects/suricata](objects/suricata/definition.json) - Suricata rule with context. * [objects/target-system](objects/target-system/definition.json) - Description about an targeted system, this could potentially be a compromissed internal system. +* [objects/timecode](objects/timecode/definition.json) - Timecode object to describe a start of video sequence (e.g. CCTV evidence) and the end of the video sequence. * [objects/timestamp](objects/timestamp/definition.json) - A generic timestamp object to represent time including first time and last time seen. Relationship will then define the kind of time relationship. * [objects/tor-node](objects/tor-node/definition.json) - Tor node description which are part of the Tor network at a time. * [objects/transaction](objects/transaction/definition.json) - Object describing a financial transaction. diff --git a/objects/timecode/definition.json b/objects/timecode/definition.json new file mode 100644 index 0000000..8a2c6ff --- /dev/null +++ b/objects/timecode/definition.json @@ -0,0 +1,52 @@ +{ + "requiredOneOf": [ + "description", + "start-marker-timecode", + "end-marker-timecode", + "start-timecode", + "end-timecode", + "recording-date" + ], + "attributes": { + "description": { + "description": "Description of the video sequence", + "ui-priority": 1, + "misp-attribute": "text" + }, + "start-marker-timecode": { + "description": "Start marker timecode in the format hh:mm:ss;ff", + "ui-priority": 0, + "misp-attribute": "text", + "multiple": true + }, + "end-marker-timecode": { + "description": "End marker timecode in the format hh:mm:ss;ff", + "ui-priority": 0, + "misp-attribute": "text", + "multiple": true + }, + "start-timecode": { + "description": "Start marker timecode in the format hh:mm:ss.mms", + "ui-priority": 0, + "misp-attribute": "text", + "multiple": true + }, + "end-timecode": { + "description": "End marker timecode in the format hh:mm:ss.mms", + "ui-priority": 0, + "misp-attribute": "text", + "multiple": true + }, + "recording-date": { + "description": "Date of recording of the video sequence", + "ui-priority": 0, + "misp-attribute": "datetime", + "multiple": true + } + }, + "version": 1, + "description": "Timecode object to describe a start of video sequence (e.g. CCTV evidence) and the end of the video sequence.", + "meta-category": "misc", + "uuid": "60141eac-71d2-4173-930d-91dba8106c40", + "name": "timecode" +}