MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

disable_correlation added

pull/17/head
Alexandre Dulaunoy 2017-03-15 07:42:14 +01:00
parent 94e8d3d100
commit 37c1722d3e
1 changed files with 20 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
objects/email/definition.json
View File

@ -4,16 +4,16 @@
"description": "Email object describing an email with meta-information", "description": "Email object describing an email with meta-information",
"version": 1, "version": 1,
"attributes": { "attributes": {
"from": { "reply-to": {
"misp-attribute": "email-src", "misp-attribute": "email-reply-to",
"misp-usage-frequency": 1, "misp-usage-frequency": 1,
"categories": [ "categories": [
"Payload delivery" "Payload delivery"
] ]
}, },
"from-display-name": { "message-id": {
"misp-attribute": "email-src-display-name", "misp-attribute": "email-message-id",
"misp-usage-frequency": 1, "misp-usage-frequency": 0,
"categories": [ "categories": [
"Payload delivery" "Payload delivery"
] ]
@ -49,23 +49,25 @@
], ],
"multiple": true "multiple": true
}, },
"message-id": { "x-mailer": {
"misp-attribute": "email-message-id", "misp-attribute": "email-xmailer",
"misp-usage-frequency": 0, "misp-usage-frequency": 0,
"categories": [ "categories": [
"Payload delivery" "Payload delivery"
] ]
}, },
"reply-to": { "header": {
"misp-attribute": "email-reply-to", "misp-attribute": "email-header",
"misp-usage-frequency": 1, "misp-usage-frequency": 0,
"categories": [ "categories": [
"Payload delivery" "Payload delivery"
] ],
"multiple": true
}, },
"send-date": { "send-date": {
"misp-attribute": "datetime", "misp-attribute": "datetime",
"misp-usage-frequency": 0, "misp-usage-frequency": 0,
"disable_correlation": true,
"categories": [ "categories": [
"Other" "Other"
] ]
@ -92,17 +94,16 @@
"Payload delivery" "Payload delivery"
] ]
}, },
"header": { "from": {
"misp-attribute": "email-header", "misp-attribute": "email-src",
"misp-usage-frequency": 0, "misp-usage-frequency": 1,
"categories": [ "categories": [
"Payload delivery" "Payload delivery"
], ]
"multiple": true
}, },
"x-mailer": { "from-display-name": {
"misp-attribute": "email-xmailer", "misp-attribute": "email-src-display-name",
"misp-usage-frequency": 0, "misp-usage-frequency": 1,
"categories": [ "categories": [
"Payload delivery" "Payload delivery"
] ]