From 1c3aff42c500fc110a4000086beeba135ef28873 Mon Sep 17 00:00:00 2001 From: goodlandsecurity Date: Fri, 20 May 2022 14:20:37 -0500 Subject: [PATCH] added date for tracking when e-mail was sent --- objects/spearphishing-attachment/definition.json | 8 +++++++- objects/spearphishing-link/definition.json | 8 +++++++- 2 files changed, 14 insertions(+), 2 deletions(-) diff --git a/objects/spearphishing-attachment/definition.json b/objects/spearphishing-attachment/definition.json index 85f909e..6557974 100644 --- a/objects/spearphishing-attachment/definition.json +++ b/objects/spearphishing-attachment/definition.json @@ -55,6 +55,12 @@ "misp-attribute": "url", "ui-priority": 1 }, + "date": { + "description": "Date and time the e-mail was sent.", + "misp-attribute": "text", + "disable_correlation": true, + "ui-priority": 0 + }, "email-sender": { "description": "The source address from which the e-mail was sent.", "misp-attribute": "email-src", @@ -100,4 +106,4 @@ ], "uuid": "5dfcd9a9-d10c-48ae-9ba4-13c2428a994a", "version": 20220520 -} \ No newline at end of file +} diff --git a/objects/spearphishing-link/definition.json b/objects/spearphishing-link/definition.json index 89d65e3..5ea5977 100644 --- a/objects/spearphishing-link/definition.json +++ b/objects/spearphishing-link/definition.json @@ -1,5 +1,11 @@ { "attributes": { + "date": { + "description": "Date and time e-mail was sent.", + "misp-attribute": "text", + "disable_correlation": true, + "ui-priority": 0 + }, "email-sender": { "description": "The source address from which the e-mail was sent.", "misp-attribute": "email-src", @@ -46,4 +52,4 @@ ], "uuid": "4e758e53-6c84-47b0-a19b-362f587059e2", "version": 20220520 -} \ No newline at end of file +}