MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: make jq validation happy

pull/313/head
Raphaël Vinot 2021-03-05 18:16:46 +01:00
parent 16a3bed253
commit 321a952a66
1 changed files with 45 additions and 45 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

90
objects/paloalto-threat-event/definition.json
View File

@ -1,7 +1,47 @@
{
"attributes": {
"type": {
"description": "The type of the Log Event",
"app": {
"description": "The application identified (e.g. vnc, ssh, sip, irc, http or smtp).",
"misp-attribute": "text",
"ui-priority": 1
},
"direction": {
"description": "The Direction of the Event.",
"misp-attribute": "text",
"ui-priority": 1
},
"dport": {
"description": "The port to which the connection headed.",
"misp-attribute": "counter",
"ui-priority": 1
},
"dst": {
"description": "The Destination IP which is the target of the observed connections.",
"misp-attribute": "ip-dst",
"ui-priority": 1
},
"dstloc": {
"description": "The Destination Location of the event.",
"misp-attribute": "text",
"ui-priority": 1
},
"proto": {
"description": "The transport protocol (e.g. tcp, udp, icmp).",
"misp-attribute": "text",
"ui-priority": 1
},
"sport": {
"description": "The port from which the connection originated.",
"misp-attribute": "counter",
"ui-priority": 1
},
"src": {
"description": "The ip observed to initiate the connection",
"misp-attribute": "ip-src",
"ui-priority": 1
},
"srcloc": {
"description": "The Source Location of the event.",
"misp-attribute": "text",
"ui-priority": 1
},
@ -15,11 +55,6 @@
"misp-attribute": "text",
"ui-priority": 1
},
"direction": {
"description": "The Direction of the Event.",
"misp-attribute": "text",
"ui-priority": 1
},
"threatid": {
"description": "The Threat ID.",
"misp-attribute": "text",
@ -30,50 +65,15 @@
"misp-attribute": "datetime",
"ui-priority": 1
},
"srcloc": {
"description": "The Source Location of the event.",
"type": {
"description": "The type of the Log Event",
"misp-attribute": "text",
"ui-priority": 1
},
"dstloc": {
"description": "The Destination Location of the event.",
"misp-attribute": "text",
"ui-priority": 1
},
"dst": {
"description": "The Destination IP which is the target of the observed connections.",
"misp-attribute": "ip-dst",
"ui-priority": 1
},
"dport": {
"description": "The port to which the connection headed.",
"misp-attribute": "counter",
"ui-priority": 1
},
"app": {
"description": "The application identified (e.g. vnc, ssh, sip, irc, http or smtp).",
"misp-attribute": "text",
"ui-priority": 1
},
"proto": {
"description": "The transport protocol (e.g. tcp, udp, icmp).",
"misp-attribute": "text",
"ui-priority": 1
},
"src": {
"description": "The ip observed to initiate the connection",
"misp-attribute": "ip-src",
"ui-priority": 1
},
"sport": {
"description": "The port from which the connection originated.",
"misp-attribute": "counter",
"ui-priority": 1
}
},
"description": "Palo Alto Threat Log Event",
"meta-category": "network",
"name": "paloalto-threat-event",
"uuid": "e6fa7a87-1173-43d6-86c2-b4d02af5fc74",
"version": 4
"version": 5
}