MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

email object added

pull/1/head
Michael Kerscher 2016-12-07 16:06:52 +01:00
parent 2859c85d9b
commit 1d97cbbd2d
1 changed files with 86 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

86
objects/email/definition.json Normal file
View File

@ -0,0 +1,86 @@
{
"name": "email",
"meta-category": "email",
"description": "Email object describing an email with meta-information",
"version": 1,
"attributes" :
{
"from": {
"misp-attribute": "email-src",
"misp-usage-frequency": 1,
"categories": ["Payload delivery"]
},
"from-display-name": {
"misp-attribute": "email-src-display-name",
"misp-usage-frequency": 1,
"categories": ["Payload delivery"]
},
"to": {
"misp-attribute": "email-dst",
"misp-usage-frequency": 1,
"categories": ["Payload delivery"],
"multiple": true
},
"to-display-name": {
"misp-attribute": "email-dst-display-name",
"misp-usage-frequency": 1,
"categories": ["Payload delivery"],
"multiple": true
},
"subject": {
"misp-attribute": "email-subject",
"misp-usage-frequency": 1,
"categories": ["Payload delivery"]
},
"attachment": {
"misp-attribute": "email-attachment",
"misp-usage-frequency": 0,
"categories": ["Payload delivery"],
"multiple": true
},
"message-id": {
"misp-attribute": "email-message-id",
"misp-usage-frequency": 0,
"categories": ["Payload delivery"]
},
"reply-to": {
"misp-attribute": "email-reply-to",
"misp-usage-frequency": 1,
"categories": ["Payload delivery"]
},
"send-date": {
"misp-attribute": "datetime",
"misp-usage-frequency": 0,
"categories": ["Other"]
},
"url": {
"misp-attribute": "url",
"misp-usage-frequency": 0,
"categories": ["Payload delivery"],
"multiple": true
},
"mime-boundary": {
"misp-attribute": "email-mime-boundary",
"misp-usage-frequency": 0,
"categories": ["Payload delivery"]
},
"thread-index": {
"misp-attribute": "email-thread-index",
"misp-usage-frequency": 0,
"categories": ["Payload delivery"]
},
"header": {
"misp-attribute": "email-header",
"misp-usage-frequency": 0,
"categories": ["Payload delivery"],
"multiple": true
},
"x-mailer": {
"misp-attribute": "email-xmailer",
"misp-usage-frequency": 0,
"categories": ["Payload delivery"]
}
},
"requiredOneOf": ["email-src", "email-src-display-name", "email-dst", "email-dst-display-name", "email-subject", "email-attachment", "email-message-id", "email-reply-to", "send-date", "url", "email-mime-boundary", "email-thread-index", "email-header", "x-mailer"]
}