diff --git a/README.md b/README.md index 963e2f3..dd87bb5 100644 --- a/README.md +++ b/README.md @@ -118,7 +118,7 @@ for a specific attribute. * [objects/ss7-attack](objects/ss7-attack/definition.json) - SS7 object of an attack seen on a GSM, UMTS or LTE network via SS7 logging. * [objects/stix2-pattern](objects/stix2-pattern/definition.json) - An object describing a STIX pattern. The object can be linked via a relationship to other attributes or objects to describe how it can be represented as a STIX pattern. * [objects/suricata](objects/suricata/definition.json) - Suricata rule with context. -* [objects/target-system](objects/target-system/definition.json) - Description about an targeted system, this could potentially be a compromissed internal system. +* [objects/target-system](objects/target-system/definition.json) - Description about an targeted system, this could potentially be a compromised internal system. * [objects/threatgrid-report](objects/threatgrid-report/definition.json) - A threatgrid report object. * [objects/timecode](objects/timecode/definition.json) - Timecode object to describe a start of video sequence (e.g. CCTV evidence) and the end of the video sequence. * [objects/timestamp](objects/timestamp/definition.json) - A generic timestamp object to represent time including first time and last time seen. Relationship will then define the kind of time relationship. @@ -127,6 +127,7 @@ for a specific attribute. * [objects/virustotal-report](objects/virustotal-report/definition.json) - VirusTotal report. * [objects/vulnerability](objects/vulnerability/definition.json) - Vulnerability object to describe software or hardware vulnerability as described in a CVE. * [objects/url](objects/url/definition.json) - url object describes an url along with its normalized field (e.g. using faup parsing library) and its metadata. +* [objects/vehicle](objects/vehicle/definition.json) - Vehicle object template to describe a vehicle information and registration. * [objects/victim](objects/victim/definition.json) - a victim object to describe the organisation being targeted or abused. * [objects/whois](objects/whois/definition.json) - Whois records information for a domain name. * [objects/x509](objects/x509/definition.json) - x509 object describing a X.509 certificate. diff --git a/objects/vehicle/definition.json b/objects/vehicle/definition.json new file mode 100644 index 0000000..cc302f0 --- /dev/null +++ b/objects/vehicle/definition.json @@ -0,0 +1,52 @@ +{ + "requiredOneOf": [ + "description", + "year", + "make", + "model", + "license-plate-number", + "vin" + ], + "attributes": { + "description": { + "description": "Description of the vehicle", + "ui-priority": 1, + "misp-attribute": "text", + "disable_correlation": true + }, + "year": { + "description": "Year of manufacturing of the vehicle", + "ui-priority": 0, + "misp-attribute": "text", + "disable_correlation": true + }, + "make": { + "description": "Manufacturer of the vehicle", + "ui-priority": 0, + "misp-attribute": "text", + "disable_correlation": true + }, + "model": { + "description": "Model of the vehicle", + "ui-priority": 0, + "misp-attribute": "text", + "disable_correlation": true + }, + "vin": { + "description": "Vehicle identification number (VIN)", + "ui-priority": 0, + "misp-attribute": "text" + }, + "license-plate-number": { + "description": "License plate number", + "ui-priority": 0, + "misp-attribute": "text", + "multiple": true + } + }, + "version": 1, + "description": "Vehicle object template to describe a vehicle information and registration", + "meta-category": "misc", + "uuid": "683c076c-f695-4ff2-8efa-e98a418049f4", + "name": "vehicle" +}