From 4c4a3aabe5137582b8dd4110d1cfb71f39d8367c Mon Sep 17 00:00:00 2001 From: VVX7 Date: Thu, 30 Jan 2020 19:57:39 -0500 Subject: [PATCH] new: [objects] news-agency, news-media --- objects/news-agency/definition.json | 73 ++++++++++++++++ objects/news-media/definition.json | 127 ++++++++++++++++++++++++++++ 2 files changed, 200 insertions(+) create mode 100644 objects/news-agency/definition.json create mode 100644 objects/news-media/definition.json diff --git a/objects/news-agency/definition.json b/objects/news-agency/definition.json new file mode 100644 index 0000000..9df81c2 --- /dev/null +++ b/objects/news-agency/definition.json @@ -0,0 +1,73 @@ +{ + "requiredOneOf": [ + "name", + "alias" + ], + "attributes": { + "name": { + "description": "Name of the news agency.", + "disable_correlation": false, + "ui-priority": 100, + "misp-attribute": "text" + }, + "alias": { + "description": "Alias of the news agency.", + "ui-priority": 99, + "misp-attribute": "text", + "multiple": true + }, + "archive": { + "description": "Archive of the original document (Internet Archive, Archive.is, etc).", + "ui-priority": 1, + "multiple": true, + "misp-attribute": "link" + }, + "attachment": { + "description": "The news file, screen capture, audio, etc.", + "ui-priority": 1, + "multiple": true, + "misp-attribute": "attachment" + }, + "url": { + "description": "Original URL location of the news agency (potentially malicious).", + "ui-priority": 1, + "misp-attribute": "url", + "multiple": true + }, + "link": { + "description": "Original link to the news agency (Supposed harmless).", + "ui-priority": 1, + "misp-attribute": "link", + "multiple": true + }, + "phone-number": { + "description": "Phone number of the news agency.", + "ui-priority": 10, + "misp-attribute": "phone-number", + "multiple": true + }, + "fax-number": { + "description": "Fax number of the news agency.", + "ui-priority": 10, + "misp-attribute": "phone-number", + "multiple": true + }, + "address": { + "description": "Postal address of the news agency.", + "ui-priority": 10, + "misp-attribute": "text", + "multiple": true + }, + "e-mail": { + "description": "Email address of the organization.", + "ui-priority": 10, + "misp-attribute": "email-src", + "multiple": true + } + }, + "version": 1, + "description": "News agencies compile news and disseminate news in bulk.", + "meta-category": "misc", + "uuid": "92b3f7fd-c4bc-42af-a73b-033ace439622", + "name": "news-agency" +} diff --git a/objects/news-media/definition.json b/objects/news-media/definition.json new file mode 100644 index 0000000..10bd39d --- /dev/null +++ b/objects/news-media/definition.json @@ -0,0 +1,127 @@ +{ + "requiredOneOf": [ + "source", + "alias" + ], + "attributes": { + "source": { + "description": "Name of the news source.", + "disable_correlation": false, + "ui-priority": 100, + "misp-attribute": "text" + }, + "alias": { + "description": "Alias of the news source.", + "ui-priority": 99, + "misp-attribute": "text", + "multiple": true + }, + "content": { + "description": "Raw content of the news.", + "ui-priority": 1, + "misp-attribute": "text" + }, + "transcription": { + "description": "Transcribed audio/visual content.", + "ui-priority": 1, + "misp-attribute": "text" + }, + "title": { + "description": "Title of the post.", + "ui-priority": 1, + "misp-attribute": "text" + }, + "archive": { + "description": "Archive of the news (Internet Archive, Archive.is, etc).", + "ui-priority": 1, + "multiple": true, + "misp-attribute": "link" + }, + "attachment": { + "description": "The news file, screen capture, audio, etc.", + "ui-priority": 1, + "multiple": true, + "misp-attribute": "attachment" + }, + "type": { + "description": "Type of news media (newspaper, TV, podcast, etc).", + "ui-priority": 1, + "misp-attribute": "text", + "disable_correlation": true, + "multiple": true, + "sane_default": [ + "Newspaper", + "Newspaper (Online)", + "Magazine", + "Magazine (Online)", + "TV", + "Tube", + "Radio", + "Radio (Online)", + "Podcast", + "Alternative Media", + "Other" + ] + }, + "sub-type": { + "misp-attribute": "text", + "ui-priority": 0, + "description": "Format of the news post (business daily, local news, metasite, etc).", + "disable_correlation": true, + "values_list": [ + "Business Daily", + "Local News", + "State News", + "National News", + "Metasite", + "Political Commentary", + "Clipper", + "Pressure Group", + "Staging", + "Trade Site", + "Other" + ] + }, + "url": { + "description": "Original URL location of news (potentially malicious).", + "ui-priority": 1, + "misp-attribute": "url", + "multiple": true + }, + "link": { + "description": "Original link to news (Supposed harmless).", + "ui-priority": 1, + "misp-attribute": "link", + "multiple": true + }, + "phone-number": { + "description": "Phone number of the news source.", + "ui-priority": 10, + "misp-attribute": "phone-number", + "multiple": true + }, + "fax-number": { + "description": "Fax number of the news source.", + "ui-priority": 10, + "misp-attribute": "phone-number", + "multiple": true + }, + "address": { + "description": "Postal address of the news source.", + "ui-priority": 10, + "misp-attribute": "text", + "multiple": true + }, + "e-mail": { + "description": "Email address of the news source.", + "ui-priority": 10, + "misp-attribute": "email-src", + "multiple": true + } + }, + "version": 1, + "description": "News media are forms of mass media deliverings news to the general public.", + "meta-category": "misc", + "uuid": "691463c5-5302-4847-9bec-4c56ccfec677", + "name": "news-media" +}