MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [typosquatting] jq_all_the_things

pull/381/head
David Cruciani 2023-01-16 08:45:20 +01:00
parent 7518752dff
commit 350c9b07cf
2 changed files with 122 additions and 122 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
objects/typosquatting-finder-result/definition.json
View File

@ -1,14 +1,5 @@
{ {
"attributes": { "attributes": {
"queried-domain": {
"categories": [
"Network activity",
"External analysis"
],
"description": "Domain name",
"misp-attribute": "domain",
"ui-priority": 1
},
"a-record": { "a-record": {
"categories": [ "categories": [
"Network activity", "Network activity",
@ -49,15 +40,17 @@
"multiple": true, "multiple": true,
"ui-priority": 1 "ui-priority": 1
}, },
"website-title": { "queried-domain": {
"description": "Website's title of the current queried domain", "categories": [
"disable_correlation": false, "Network activity",
"misp-attribute": "text", "External analysis"
"recommended": false, ],
"description": "Domain name",
"misp-attribute": "domain",
"ui-priority": 1 "ui-priority": 1
}, },
"website-similarity": { "ratio-similarity": {
"description": "Similarity between website of both research and current variations domain", "description": "Similarity probability",
"disable_correlation": true, "disable_correlation": true,
"misp-attribute": "text", "misp-attribute": "text",
"recommended": false, "recommended": false,
@ -70,12 +63,19 @@
"recommended": false, "recommended": false,
"ui-priority": 1 "ui-priority": 1
}, },
"ratio-similarity": { "website-similarity": {
"description": "Similarity probability", "description": "Similarity between website of both research and current variations domain",
"disable_correlation": true, "disable_correlation": true,
"misp-attribute": "text", "misp-attribute": "text",
"recommended": false, "recommended": false,
"ui-priority": 1 "ui-priority": 1
},
"website-title": {
"description": "Website's title of the current queried domain",
"disable_correlation": false,
"misp-attribute": "text",
"recommended": false,
"ui-priority": 1
} }
}, },
"description": "Typosquatting result", "description": "Typosquatting result",
@ -86,4 +86,4 @@
], ],
"uuid": "22151d90-b39b-498c-86c7-126ddd2e1a55", "uuid": "22151d90-b39b-498c-86c7-126ddd2e1a55",
"version": 1 "version": 1
} }

8
objects/typosquatting-finder/definition.json
View File

@ -11,15 +11,15 @@
"recommended": false, "recommended": false,
"ui-priority": 1 "ui-priority": 1
}, },
"variations-number": { "variations-found-number": {
"description": "Number of variations for the research domain.", "description": "Number of variations for the research domain that some info is found.",
"disable_correlation": true, "disable_correlation": true,
"misp-attribute": "text", "misp-attribute": "text",
"recommended": false, "recommended": false,
"ui-priority": 1 "ui-priority": 1
}, },
"variations-found-number": { "variations-number": {
"description": "Number of variations for the research domain that some info is found.", "description": "Number of variations for the research domain.",
"disable_correlation": true, "disable_correlation": true,
"misp-attribute": "text", "misp-attribute": "text",
"recommended": false, "recommended": false,