From 5eea5eae1498fd948ae9261331b35bdc1e1ea97f Mon Sep 17 00:00:00 2001 From: enes Date: Mon, 14 Mar 2022 16:07:09 +0100 Subject: [PATCH 1/2] Add game-cheat Object --- objects/game-cheat/definition.json | 113 +++++++++++++++++++++++++++++ 1 file changed, 113 insertions(+) create mode 100644 objects/game-cheat/definition.json diff --git a/objects/game-cheat/definition.json b/objects/game-cheat/definition.json new file mode 100644 index 0000000..391fe87 --- /dev/null +++ b/objects/game-cheat/definition.json @@ -0,0 +1,113 @@ +{ + "attributes": { + "affected-game": { + "description": "Name of the game that is targeted by the cheatware.", + "misp-attribute": "text", + "ui-priority": 7 + }, + "cheat-name": { + "description": "Known name of the game cheat, if given.", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 12 + }, + "cheat-screenshot": { + "description": "Screenshot of the cheat at work.", + "misp-attribute": "attachment", + "ui-priority": 9 + }, + "cheat-type": { + "description": "Select the type of cheat.", + "misp-attribute": "text", + "multiple": true, + "ui-priority": 11, + "values_list": [ + "Aim bot", + "Auto farmer", + "Boosting", + "DDoS", + "Disconnecting", + "Exploit", + "Fly", + "Force field", + "Ghosting", + "God mode", + "Invicibility", + "Macros", + "RapidFire", + "Scripting", + "Wallhack", + "Win trading", + "Others" + ] + }, + "cheat-version": { + "description": "Any information about the cheatware version.", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 8 + }, + "compilation-date": { + "description": "Compilation date of the game cheat, if known.", + "disable_correlation": true, + "misp-attribute": "datetime", + "ui-priority": 5 + }, + "creator": { + "description": "Individual and/or Group and/or Organization that created the cheat.", + "misp-attribute": "threat-actor", + "ui-priority": 1 + }, + "ig-cheat-behaviour": { + "description": "Describe the in-game behaviour of the cheat (e.g. You selected 'Aim Bot', here you can add details like 'Activate by pressing F7, Deactivate by pressing F8. Not detected be Easy Anti-Cheat.'", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 10 + }, + "implementation": { + "description": "How cheatware is implemented", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 4, + "values_list": [ + "Game code modification", + "In-memory data manipulation", + "System software modification", + "Packet interception and manipulation" + ] + }, + "implementation-details": { + "description": "Additionnal informations about the implementation of the cheatware. (e.g. Requires to swap a dll file.)", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 3 + }, + "operating-system": { + "description": "Operating system required and its version.", + "disable_correlation": true, + "misp-attribute": "text", + "multiple": true, + "ui-priority": 2 + }, + "pricing": { + "description": "Cheatware price, 0 if free.", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 6 + }, + "webpage": { + "description": "Place where the cheat is promoted. Website, Forum, Download page, ...", + "misp-attribute": "url", + "ui-priority": 0 + } + }, + "description": "Describes a game cheat or a cheatware.", + "meta-category": "misc", + "name": "game-cheat", + "required": [ + "affected-game", + "cheat-type" + ], + "uuid": "ab31f87b-f8ac-4dfc-b610-359302b4e86b", + "version": 7 +} \ No newline at end of file From 3c7ee6214e1ad29fbeb24f9418e23f28d65f3cc5 Mon Sep 17 00:00:00 2001 From: enes-usta Date: Tue, 15 Mar 2022 03:37:26 +0100 Subject: [PATCH 2/2] added cheat types and minor changes --- objects/game-cheat/definition.json | 18 +++++++++++------- 1 file changed, 11 insertions(+), 7 deletions(-) diff --git a/objects/game-cheat/definition.json b/objects/game-cheat/definition.json index 391fe87..bc7dd77 100644 --- a/objects/game-cheat/definition.json +++ b/objects/game-cheat/definition.json @@ -17,27 +17,30 @@ "ui-priority": 9 }, "cheat-type": { - "description": "Select the type of cheat.", + "description": "Select a type of cheat.", "misp-attribute": "text", "multiple": true, "ui-priority": 11, "values_list": [ - "Aim bot", + "Aimbot", + "Artificial lag", "Auto farmer", - "Boosting", "DDoS", "Disconnecting", "Exploit", "Fly", "Force field", + "Full brightness", "Ghosting", "God mode", "Invicibility", "Macros", + "No clip", + "No fog", "RapidFire", "Scripting", + "Show Hitboxes", "Wallhack", - "Win trading", "Others" ] }, @@ -59,9 +62,9 @@ "ui-priority": 1 }, "ig-cheat-behaviour": { - "description": "Describe the in-game behaviour of the cheat (e.g. You selected 'Aim Bot', here you can add details like 'Activate by pressing F7, Deactivate by pressing F8. Not detected be Easy Anti-Cheat.'", + "description": "Describe the in-game behaviour of the cheat (e.g. You selected 'Aim Bot', here you can add details like 'Activate by pressing F7, Deactivate by pressing F8. Not detected be Easy Anti-Cheat.')", "disable_correlation": true, - "misp-attribute": "text", + "misp-attribute": "comment", "ui-priority": 10 }, "implementation": { @@ -93,6 +96,7 @@ "description": "Cheatware price, 0 if free.", "disable_correlation": true, "misp-attribute": "text", + "multiple": true, "ui-priority": 6 }, "webpage": { @@ -109,5 +113,5 @@ "cheat-type" ], "uuid": "ab31f87b-f8ac-4dfc-b610-359302b4e86b", - "version": 7 + "version": 9 } \ No newline at end of file