From 089042085661bbfc36700fbd4d451996c10d3777 Mon Sep 17 00:00:00 2001 From: chrisr3d Date: Thu, 6 Sep 2018 11:20:26 +0200 Subject: [PATCH] new: New Object describing original files usedd to import data in MISP --- README.md | 1 + .../original-imported-file/definition.json | 34 +++++++++++++++++++ 2 files changed, 35 insertions(+) create mode 100644 objects/original-imported-file/definition.json diff --git a/README.md b/README.md index dd87bb5..472d106 100644 --- a/README.md +++ b/README.md @@ -100,6 +100,7 @@ for a specific attribute. * [objects/mutex](objects/mutex/definition.json) - Object to describe mutual exclusion locks (mutex) as seen in memory or computer program. * [objects/netflow](objects/netflow/definition.json) - Netflow object describes an network object based on the Netflowv5/v9 minimal definition. * [objects/network-connection](objects/network-connection/definition.json) - Network object describes a local or remote network connection. +* [objects/original-imported-file](pbjects/original-imported-file/definition.json) - Object to describe the original files used to import data in MISP. * [objects/passive-dns](objects/passive-dns/definition.json) - Passive DNS records as expressed in [draft-dulaunoy-dnsop-passive-dns-cof-01](https://tools.ietf.org/html/draft-dulaunoy-dnsop-passive-dns-cof-01). * [objects/paste](objects/paste/definition.json) - Object describing a paste or similar post from a website allowing to share privately or publicly posts. * [objects/pe](objects/pe/definition.json) - Portable Executable (PE) object. diff --git a/objects/original-imported-file/definition.json b/objects/original-imported-file/definition.json new file mode 100644 index 0000000..2a2c0d9 --- /dev/null +++ b/objects/original-imported-file/definition.json @@ -0,0 +1,34 @@ +{ + "requiredOneOf": [ + "filename", + "imported-sample", + "type" + ], + "attributes": { + "filename": { + "description": "Original name of the file imported.", + "ui-priority": 1, + "misp-attribute": "filename" + }, + "imported-sample": { + "description": "The original imported file itself (binary).", + "ui-priority": 1, + "misp-attribute": "attachment" + }, + "type": { + "description": "Type of data imported.", + "ui-priority": 1, + "misp-attribute": "text" + }, + "uri": { + "description": "URI related to the imported file.", + "ui-priority": 0, + "misp-attribute": "uri" + } + }, + "version": 1, + "description": "Object describing the original file used to import data in MISP.", + "meta-category": "file", + "uuid": "4cd560e9-2cfe-40a1-9964-7b2e797ecac5", + "name": "original-imported-file" +}