MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [ddos-config] as the config is mainly describing targets 

to_ids and correlation don't make a lot of sense
pull/434/head
Alexandre Dulaunoy 2024-07-18 15:10:13 +02:00
parent 0833c40b05
commit 454285fea5
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
objects/ddos-config/definition.json
View File

@ -2,8 +2,10 @@
"attributes": { "attributes": {
"body": { "body": {
"description": "Payload used for the DDos", "description": "Payload used for the DDos",
"disable_correlation": true,
"misp-attribute": "text", "misp-attribute": "text",
"multiple": true, "multiple": true,
"to_ids": false,
"ui-priority": 0 "ui-priority": 0
}, },
"ddos-tool": { "ddos-tool": {
@ -18,6 +20,7 @@
}, },
"headers": { "headers": {
"description": "Headers used in the DDoS requests", "description": "Headers used in the DDoS requests",
"disable_correlation": true,
"misp-attribute": "text", "misp-attribute": "text",
"multiple": true, "multiple": true,
"ui-priority": 0 "ui-priority": 0
@ -27,12 +30,15 @@
"disable_correlation": true, "disable_correlation": true,
"misp-attribute": "hostname", "misp-attribute": "hostname",
"multiple": true, "multiple": true,
"to_ids": false,
"ui-priority": 0 "ui-priority": 0
}, },
"ip": { "ip": {
"description": "IP address used as target of the DDoS attack", "description": "IP address used as target of the DDoS attack",
"disable_correlation": true,
"misp-attribute": "ip-dst", "misp-attribute": "ip-dst",
"multiple": true, "multiple": true,
"to_ids": false,
"ui-priority": 0 "ui-priority": 0
}, },
"method": { "method": {
@ -54,8 +60,10 @@
}, },
"path": { "path": {
"description": "URL path used for the DDoS attack (excluded hostname)", "description": "URL path used for the DDoS attack (excluded hostname)",
"disable_correlation": true,
"misp-attribute": "text", "misp-attribute": "text",
"multiple": true, "multiple": true,
"to_ids": false,
"ui-priority": 0 "ui-priority": 0
}, },
"port": { "port": {
@ -66,6 +74,7 @@
}, },
"request-id": { "request-id": {
"description": "request id", "description": "request id",
"disable_correlation": true,
"misp-attribute": "text", "misp-attribute": "text",
"ui-priority": 0 "ui-priority": 0
}, },
@ -108,5 +117,5 @@
"ddos-tool" "ddos-tool"
], ],
"uuid": "e56d7f93-258e-4ba5-bd8a-463acd6d98c4", "uuid": "e56d7f93-258e-4ba5-bd8a-463acd6d98c4",
"version": 2 "version": 3
} }