From 3f9aca8e27290cbb859427aeb228bba62adb71e0 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Thu, 6 Feb 2020 11:03:33 +0100
Subject: [PATCH] chg: [email] ip-src added in the email object templated as
 requested by Norberto Chavez

Ref: https://twitter.com/NORBERTOCHAVEZ/status/1225213457429127170
---
 objects/email/definition.json | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/objects/email/definition.json b/objects/email/definition.json
index fe3553e..d6d7142 100644
--- a/objects/email/definition.json
+++ b/objects/email/definition.json
@@ -3,7 +3,7 @@
   "uuid": "a0c666e0-fc65-4be8-b48f-3423d788b552",
   "meta-category": "network",
   "description": "Email object describing an email with meta-information",
-  "version": 13,
+  "version": 14,
   "attributes": {
     "reply-to": {
       "description": "Email address the reply will be sent to",
@@ -174,6 +174,12 @@
       "ui-priority": 0,
       "disable_correlation": true
     },
+    "ip-src": {
+      "description": "Source IP address of the email sender",
+      "misp-attribute": "ip-src",
+      "ui-priority": 0,
+      "multiple": true
+    },
     "eml": {
       "description": "Full EML",
       "misp-attribute": "attachment",