MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

add: [cortex] new object based on a discussion with Jerome L. from TheHive (thanks to SNCF)

pull/130/head
Alexandre Dulaunoy 2018-11-18 10:28:18 +01:00
parent 3ec98a8a65
commit 39dd150e2a
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 48 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

48
objects/cortex/definition.json Normal file
View File

@ -0,0 +1,48 @@
{
"requiredOneOf": [
"full"
],
"attributes": {
"summary": {
"description": "Cortex summary object (summary) in JSON",
"disable_correlation": false,
"ui-priority": 0,
"misp-attribute": "text"
},
"full": {
"description": "Cortex report object (full report) in JSON",
"disable_correlation": true,
"ui-priority": 0,
"misp-attribute": "text"
},
"start-date": {
"description": "When the Cortex analyser was started",
"disable_correlation": true,
"ui-priority": 0,
"misp-attribute": "datetime"
},
"name": {
"description": "Cortex analyser/worker name",
"disable_correlation": true,
"ui-priority": 0,
"misp-attribute": "text"
},
"server-name": {
"description": "Name of the cortex server",
"disable_correlation": true,
"ui-priority": 0,
"misp-attribute": "text"
},
"success": {
"description": "Result of the cortex job",
"disable_correlation": true,
"ui-priority": 0,
"misp-attribute": "boolean"
}
},
"version": 1,
"description": "Cortex object describing a complete cortex analysis",
"meta-category": "misc",
"uuid": "144988f3-fa00-4374-8015-c1a32092f451",
"name": "cortex"
}