From 321a952a6695f1e9abee22ee212953906829f48e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Rapha=C3=ABl=20Vinot?= Date: Fri, 5 Mar 2021 18:16:46 +0100 Subject: [PATCH] chg: make jq validation happy --- objects/paloalto-threat-event/definition.json | 90 +++++++++---------- 1 file changed, 45 insertions(+), 45 deletions(-) diff --git a/objects/paloalto-threat-event/definition.json b/objects/paloalto-threat-event/definition.json index 08607a6..0fb3ac9 100644 --- a/objects/paloalto-threat-event/definition.json +++ b/objects/paloalto-threat-event/definition.json @@ -1,7 +1,47 @@ { "attributes": { - "type": { - "description": "The type of the Log Event", + "app": { + "description": "The application identified (e.g. vnc, ssh, sip, irc, http or smtp).", + "misp-attribute": "text", + "ui-priority": 1 + }, + "direction": { + "description": "The Direction of the Event.", + "misp-attribute": "text", + "ui-priority": 1 + }, + "dport": { + "description": "The port to which the connection headed.", + "misp-attribute": "counter", + "ui-priority": 1 + }, + "dst": { + "description": "The Destination IP which is the target of the observed connections.", + "misp-attribute": "ip-dst", + "ui-priority": 1 + }, + "dstloc": { + "description": "The Destination Location of the event.", + "misp-attribute": "text", + "ui-priority": 1 + }, + "proto": { + "description": "The transport protocol (e.g. tcp, udp, icmp).", + "misp-attribute": "text", + "ui-priority": 1 + }, + "sport": { + "description": "The port from which the connection originated.", + "misp-attribute": "counter", + "ui-priority": 1 + }, + "src": { + "description": "The ip observed to initiate the connection", + "misp-attribute": "ip-src", + "ui-priority": 1 + }, + "srcloc": { + "description": "The Source Location of the event.", "misp-attribute": "text", "ui-priority": 1 }, @@ -15,11 +55,6 @@ "misp-attribute": "text", "ui-priority": 1 }, - "direction": { - "description": "The Direction of the Event.", - "misp-attribute": "text", - "ui-priority": 1 - }, "threatid": { "description": "The Threat ID.", "misp-attribute": "text", @@ -30,50 +65,15 @@ "misp-attribute": "datetime", "ui-priority": 1 }, - "srcloc": { - "description": "The Source Location of the event.", + "type": { + "description": "The type of the Log Event", "misp-attribute": "text", "ui-priority": 1 - }, - "dstloc": { - "description": "The Destination Location of the event.", - "misp-attribute": "text", - "ui-priority": 1 - }, - "dst": { - "description": "The Destination IP which is the target of the observed connections.", - "misp-attribute": "ip-dst", - "ui-priority": 1 - }, - "dport": { - "description": "The port to which the connection headed.", - "misp-attribute": "counter", - "ui-priority": 1 - }, - "app": { - "description": "The application identified (e.g. vnc, ssh, sip, irc, http or smtp).", - "misp-attribute": "text", - "ui-priority": 1 - }, - "proto": { - "description": "The transport protocol (e.g. tcp, udp, icmp).", - "misp-attribute": "text", - "ui-priority": 1 - }, - "src": { - "description": "The ip observed to initiate the connection", - "misp-attribute": "ip-src", - "ui-priority": 1 - }, - "sport": { - "description": "The port from which the connection originated.", - "misp-attribute": "counter", - "ui-priority": 1 } }, "description": "Palo Alto Threat Log Event", "meta-category": "network", "name": "paloalto-threat-event", "uuid": "e6fa7a87-1173-43d6-86c2-b4d02af5fc74", - "version": 4 + "version": 5 }