From 0ba49095491e2be23f8b8ac8e58ea7e006852bf0 Mon Sep 17 00:00:00 2001 From: chrisr3d Date: Mon, 7 Sep 2020 23:56:10 +0200 Subject: [PATCH] add: First version of a BGP ranking object to represent the ranking of an ASN at a specific point of time - We can then associate as many bgp-ranking objects as we need to the corresponding ASN object, each one of them being the ranking of the ASN for a given day --- objects/bgp-ranking/definition.json | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 objects/bgp-ranking/definition.json diff --git a/objects/bgp-ranking/definition.json b/objects/bgp-ranking/definition.json new file mode 100644 index 0000000..4f38b5e --- /dev/null +++ b/objects/bgp-ranking/definition.json @@ -0,0 +1,28 @@ +{ + "attributes": { + "date": { + "description": "Date fo the ranking.", + "misp-attribute": "datetime", + "ui-priority": 1 + }, + "position": { + "description": "Position of the ASN for a given day.", + "misp-attribute": "float", + "ui-priority": 0 + }, + "ranking": { + "description": "Ranking of the Autonomous System number.", + "misp-attribute": "float", + "ui-priority": 1 + } + }, + "description": "BGP Ranking object describing the ranking of an ASN for a given day, along with its position, 1 being the most malicious ASN of the day, with the highest ranking. This object is meant to have a relationship with the corresponding ASN object and represents its ranking for a specific date.", + "meta-category": "network", + "name": "bgp-ranking", + "required": [ + "date", + "ranking" + ], + "uuid": "0cf87909-e44a-4426-8ebc-a250f932ce00", + "version": 1 +}