From 88c029a190116b46ae66c9fe2d349cf70586c064 Mon Sep 17 00:00:00 2001 From: Leviathan <97615419+prose-leviathan@users.noreply.github.com> Date: Wed, 23 Oct 2024 10:40:13 +0200 Subject: [PATCH 1/5] Create definition.json --- objects/opentide/definition.json | 1 + 1 file changed, 1 insertion(+) create mode 100644 objects/opentide/definition.json diff --git a/objects/opentide/definition.json b/objects/opentide/definition.json new file mode 100644 index 0000000..0967ef4 --- /dev/null +++ b/objects/opentide/definition.json @@ -0,0 +1 @@ +{} From fe49693c918e42925808f00677608cc54d16e35c Mon Sep 17 00:00:00 2001 From: Leviathan <97615419+prose-leviathan@users.noreply.github.com> Date: Wed, 23 Oct 2024 10:49:07 +0200 Subject: [PATCH 2/5] Update definition.json --- objects/opentide/definition.json | 36 +++++++++++++++++++++++++++++++- 1 file changed, 35 insertions(+), 1 deletion(-) diff --git a/objects/opentide/definition.json b/objects/opentide/definition.json index 0967ef4..1c3625f 100644 --- a/objects/opentide/definition.json +++ b/objects/opentide/definition.json @@ -1 +1,35 @@ -{} +{ + "attributes": { + "uuid": { + "description": "UUID of the OpenTIDE Object", + "misp-attribute": "text", + "ui-priority": 0 + }, + "opentide-object": { + "description": "YAML Content of the Opentide Object", + "misp-attribute": "text", + "ui-priority": 0 + }, + "opentide-type": { + "description": "Type of the OpenTIDE Object", + "misp-attribute": "text", + "disable_correlation": true, + "multiple": false, + "values_list": [ + "tvm", + "cdm", + "mdr" + ] + } + }, + "description": "Object that is a container for threat or detection data, in accordance with the OpenTIDE Framework", + "meta-category": "misc", + "name": "sigma", + "required": [ + "uuid", + "opentide-object", + "opentide-type" + ], + "uuid": "892fd46a-f69e-455c-8c4f-843a4b8f4295", + "version": 1 +} From 3fdab9024228618c40ac477cd58fc14f7c8394c2 Mon Sep 17 00:00:00 2001 From: Leviathan <97615419+prose-leviathan@users.noreply.github.com> Date: Wed, 23 Oct 2024 12:09:50 +0200 Subject: [PATCH 3/5] Update definition.json --- objects/opentide/definition.json | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/objects/opentide/definition.json b/objects/opentide/definition.json index 1c3625f..1a17667 100644 --- a/objects/opentide/definition.json +++ b/objects/opentide/definition.json @@ -8,11 +8,12 @@ "opentide-object": { "description": "YAML Content of the Opentide Object", "misp-attribute": "text", - "ui-priority": 0 + "ui-priority": 2 }, "opentide-type": { "description": "Type of the OpenTIDE Object", "misp-attribute": "text", + "ui-priority": 1, "disable_correlation": true, "multiple": false, "values_list": [ @@ -24,7 +25,7 @@ }, "description": "Object that is a container for threat or detection data, in accordance with the OpenTIDE Framework", "meta-category": "misc", - "name": "sigma", + "name": "opentide", "required": [ "uuid", "opentide-object", From 74ea5fb83878600ebe6d38f9dcfa2cd546393e23 Mon Sep 17 00:00:00 2001 From: Leviathan <97615419+prose-leviathan@users.noreply.github.com> Date: Wed, 23 Oct 2024 12:11:37 +0200 Subject: [PATCH 4/5] Update definition.json --- objects/opentide/definition.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/objects/opentide/definition.json b/objects/opentide/definition.json index 1a17667..e1c0129 100644 --- a/objects/opentide/definition.json +++ b/objects/opentide/definition.json @@ -23,7 +23,7 @@ ] } }, - "description": "Object that is a container for threat or detection data, in accordance with the OpenTIDE Framework", + "description": "Object that is a container for threat or detection data, in accordance with the OpenTIDE Framework (https://code.europa.eu/ec-digit-s2/opentide)", "meta-category": "misc", "name": "opentide", "required": [ From d3c82ae816483962869390fff35d23fe4bda056d Mon Sep 17 00:00:00 2001 From: Leviathan <97615419+prose-leviathan@users.noreply.github.com> Date: Wed, 23 Oct 2024 12:23:29 +0200 Subject: [PATCH 5/5] Update definition.json --- objects/opentide/definition.json | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/objects/opentide/definition.json b/objects/opentide/definition.json index e1c0129..1304bac 100644 --- a/objects/opentide/definition.json +++ b/objects/opentide/definition.json @@ -3,17 +3,22 @@ "uuid": { "description": "UUID of the OpenTIDE Object", "misp-attribute": "text", + "ui-priority": 1 + }, + "name": { + "description": "Name of the OpenTIDE Object", + "misp-attribute": "text", "ui-priority": 0 }, "opentide-object": { "description": "YAML Content of the Opentide Object", "misp-attribute": "text", - "ui-priority": 2 + "ui-priority": 3 }, "opentide-type": { "description": "Type of the OpenTIDE Object", "misp-attribute": "text", - "ui-priority": 1, + "ui-priority": 2, "disable_correlation": true, "multiple": false, "values_list": [