MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

dnsdbflex object

pull/315/head
aaronkaplan 2021-05-26 12:34:34 +02:00
parent 93b99230e3
commit 094d61a51a
No known key found for this signature in database
GPG Key ID: 1AED8B672DD4C9B1
1 changed files with 47 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

47
objects/passive-dns-dnsdbflex/definition.json Normal file
View File

@ -0,0 +1,47 @@
{
"attributes": {
"rrname": {
"categories": [
"Network activity",
"External analysis"
],
"description": "Resource Record name of the queried resource.",
"misp-attribute": "text",
"ui-priority": 1
},
"rrtype": {
"categories": [
"Network activity",
"External analysis"
],
"description": "Resource Record type as seen by the passive DNS.",
"disable_correlation": true,
"misp-attribute": "text",
"sane_default": [
"A",
"AAAA",
"CNAME",
"PTR",
"SOA",
"TXT",
"DNAME",
"NS",
"SRV",
"RP",
"NAPTR",
"HINFO",
"A6"
],
"ui-priority": 1
}
},
"description": "DNSDBFLEX object. This object is used at farsight security. Roughly based on Passive DNS records as expressed in draft-dulaunoy-dnsop-passive-dns-cof-07. See https://tools.ietf.org/id/draft-dulaunoy-dnsop-passive-dns-cof-07.html",
"meta-category": "network",
"name": "passive-dns-dnsdbflex",
"required": [
"rrtype",
"rrname"
],
"uuid": "e5066302-be0d-11eb-ab6d-2bb17990cb48",
"version": 1
}