MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

add: [network-socket] Added the first & last packet seen object relation and made the protocol attribute multiple

pull/387/head
Christian Studer 2023-03-07 16:48:00 +01:00
parent 57beac3bc7
commit 1651281d0b
No known key found for this signature in database
GPG Key ID: 6BBED1B63A6D639F
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
objects/network-socket/definition.json
View File

@ -120,6 +120,12 @@
"misp-attribute": "filename", "misp-attribute": "filename",
"ui-priority": 1 "ui-priority": 1
}, },
"first-packet-seen": {
"description": "Datetime of the first packet seen.",
"disable_correlation": true,
"misp-attribute": "datetime",
"ui-priority": 1
},
"hostname-dst": { "hostname-dst": {
"description": "Destination hostname of the network socket connection.", "description": "Destination hostname of the network socket connection.",
"misp-attribute": "hostname", "misp-attribute": "hostname",
@ -148,6 +154,12 @@
"misp-attribute": "ip-src", "misp-attribute": "ip-src",
"ui-priority": 1 "ui-priority": 1
}, },
"last-packet-seen": {
"description": "Datetime of the last packet seen.",
"disable_correlatioin": true,
"misp-attribute": "datetime",
"ui-priority": 1
},
"option": { "option": {
"description": "Option on the socket connection.", "description": "Option on the socket connection.",
"misp-attribute": "text", "misp-attribute": "text",
@ -157,6 +169,7 @@
"protocol": { "protocol": {
"description": "Protocol used by the network socket.", "description": "Protocol used by the network socket.",
"misp-attribute": "text", "misp-attribute": "text",
"multiple": true,
"ui-priority": 0, "ui-priority": 0,
"values_list": [ "values_list": [
"TCP", "TCP",