MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

disabled AV software correlation and re-ran jq-all-the-things

pull/40/head
Thomas Gardner 2017-10-24 10:23:46 -04:00
parent f9204db304
commit 1c4933c1ce
2 changed files with 98 additions and 97 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

91
objects/av-signature/definition.json
View File

@ -1,47 +1,48 @@
{ {
"required": [ "required": [
"software", "software",
"signature" "signature"
], ],
"attributes": { "attributes": {
"software": { "software": {
"description": "Name of antivirus software", "description": "Name of antivirus software",
"categories": [ "disable_correlation": true,
"Antivirus detection" "categories": [
], "Antivirus detection"
"ui-priority": 1, ],
"misp-attribute": "text" "ui-priority": 1,
}, "misp-attribute": "text"
"signature": {
"description": "Name of detection signature",
"categories": [
"Antivirus detection"
],
"ui-priority": 2,
"misp-attribute": "text"
},
"text": {
"description": "Free text value to attach to the file",
"disable_correlation": true,
"categories": [
"Other"
],
"ui-priority": 0,
"misp-attribute": "text"
},
"datetime": {
"description": "Datetime",
"disable_correlation": true,
"categories": [
"Other"
],
"ui-priority": 0,
"misp-attribute": "datetime"
}
}, },
"version": 1, "signature": {
"description": "Antivirus detection signature", "description": "Name of detection signature",
"meta-category": "misc", "categories": [
"uuid": "4dbb56ef-4763-4c97-8696-a2bfc305cf8e", "Antivirus detection"
"name": "av-signature" ],
} "ui-priority": 2,
"misp-attribute": "text"
},
"text": {
"description": "Free text value to attach to the file",
"disable_correlation": true,
"categories": [
"Other"
],
"ui-priority": 0,
"misp-attribute": "text"
},
"datetime": {
"description": "Datetime",
"disable_correlation": true,
"categories": [
"Other"
],
"ui-priority": 0,
"misp-attribute": "datetime"
}
},
"version": 1,
"description": "Antivirus detection signature",
"meta-category": "misc",
"uuid": "4dbb56ef-4763-4c97-8696-a2bfc305cf8e",
"name": "av-signature"
}

104
objects/virustotal-report/definition.json
View File

@ -1,54 +1,54 @@
{ {
"required": [ "required": [
"permalink" "permalink"
], ],
"attributes": { "attributes": {
"community-score": { "community-score": {
"description": "Community Score", "description": "Community Score",
"disable_correlation": true, "disable_correlation": true,
"categories": [ "categories": [
"External analysis" "External analysis"
], ],
"ui-priority": 0, "ui-priority": 0,
"misp-attribute": "text" "misp-attribute": "text"
},
"detection-ratio": {
"description": "Detection Ratio",
"disable_correlation": true,
"categories": [
"External analysis"
],
"ui-priority": 1,
"misp-attribute": "text"
},
"first-submission": {
"description": "First Submission",
"categories": [
"Other"
],
"ui-priority": 0,
"misp-attribute": "datetime"
},
"last-submission": {
"description": "Last Submission",
"categories": [
"Other"
],
"ui-priority": 0,
"misp-attribute": "datetime"
},
"permalink": {
"description": "Permalink Reference",
"categories": [
"External analysis"
],
"ui-priority": 2,
"misp-attribute": "link"
}
}, },
"version": 1, "detection-ratio": {
"description": "VirusTotal report", "description": "Detection Ratio",
"meta-category": "misc", "disable_correlation": true,
"uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4", "categories": [
"name": "virustotal-report" "External analysis"
} ],
"ui-priority": 1,
"misp-attribute": "text"
},
"first-submission": {
"description": "First Submission",
"categories": [
"Other"
],
"ui-priority": 0,
"misp-attribute": "datetime"
},
"last-submission": {
"description": "Last Submission",
"categories": [
"Other"
],
"ui-priority": 0,
"misp-attribute": "datetime"
},
"permalink": {
"description": "Permalink Reference",
"categories": [
"External analysis"
],
"ui-priority": 2,
"misp-attribute": "link"
}
},
"version": 1,
"description": "VirusTotal report",
"meta-category": "misc",
"uuid": "d7dd0154-e04f-4c34-a2fb-79f3a3a52aa4",
"name": "virustotal-report"
}