MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

A first experimental description of a MISP combined object

pull/2/head
Alexandre Dulaunoy 2016-02-08 15:09:46 +01:00
commit 39c570824a
1 changed files with 27 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
objects/domain-ip/definition.json Normal file
View File

@ -0,0 +1,27 @@
{
"name": "domain|ip",
"description": "A domain and IP address seen as a tuple in a specific time frame.",
"version": 1,
"properties" :
{
"ip": {
"misp-object": "ip-dst",
"misp-usage-frequency": 1
},
"domain": {
"misp-object": "domain",
"misp-usage-frequency": 1
},
"first-seen": {
"misp-object": "datetime",
"misp-usage-frequency": 0
},
"last-seen": {
"misp-object": "datetime",
"misp-usage-frequency": 0
}
},
"default-logical-operator": "AND"
}