MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

add: opposite of 26 relationships

pull/306/head
Théo BARRAGUÉ 2021-01-12 18:53:50 +01:00 committed by GitHub
parent fd7c05d74b
commit 5c197e99c3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 53 additions and 27 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

80
relationships/definition.json
View File

@ -43,7 +43,8 @@
"misp",
"stix-1.1"
],
"name": "connected-to"
"name": "connected-to",
"opposite": "connected-from"
},
{
"description": "The referenced source is connected from the target object.",
@ -51,7 +52,8 @@
"misp",
"stix-1.1"
],
"name": "connected-from"
"name": "connected-from",
"opposite": "connected-to"
},
{
"description": "The referenced source is containing the target object.",
@ -60,7 +62,8 @@
"stix-1.1",
"alfred"
],
"name": "contains"
"name": "contains",
"opposite": "contained-by"
},
{
"description": "The referenced source is contained by the target object.",
@ -68,7 +71,8 @@
"misp",
"stix-1.1"
],
"name": "contained-by"
"name": "contained-by",
"opposite": "contains"
},
{
"description": "The referenced source is contained within the target object.",
@ -84,7 +88,8 @@
"misp",
"stix-1.1"
],
"name": "characterized-by"
"name": "characterized-by",
"opposite": "characterizes"
},
{
"description": "The referenced source is characterizing the target object.",
@ -92,7 +97,8 @@
"misp",
"stix-1.1"
],
"name": "characterizes"
"name": "characterizes",
"opposite": "characterized-by"
},
{
"description": "The referenced source has queried the target object.",
@ -100,7 +106,8 @@
"misp",
"stix-1.1"
],
"name": "properties-queried"
"name": "properties-queried",
"opposite": "properties-queried-by"
},
{
"description": "The referenced source is queried by the target object.",
@ -108,7 +115,8 @@
"misp",
"stix-1.1"
],
"name": "properties-queried-by"
"name": "properties-queried-by",
"opposite": "properties-queried"
},
{
"description": "The referenced source is extracted from the target object.",
@ -124,7 +132,8 @@
"misp",
"stix-1.1"
],
"name": "supra-domain-of"
"name": "supra-domain-of",
"opposite": "sub-domain-of"
},
{
"description": "The referenced source is a sub domain of the target object.",
@ -132,7 +141,8 @@
"misp",
"stix-1.1"
],
"name": "sub-domain-of"
"name": "sub-domain-of",
"opposite": "supra-domain-of"
},
{
"description": "The referenced source has dropped the target object.",
@ -156,7 +166,8 @@
"misp",
"stix-1.1"
],
"name": "downloaded"
"name": "downloaded",
"opposite": "downloaded-from"
},
{
"description": "The referenced source has been downloaded from the target object.",
@ -164,7 +175,8 @@
"misp",
"stix-1.1"
],
"name": "downloaded-from"
"name": "downloaded-from",
"opposite": "downloaded"
},
{
"description": "The referenced source is resolved to the target object.",
@ -197,7 +209,8 @@
"stix-2.0",
"alfred"
],
"name": "uses"
"name": "uses",
"opposite": "used-by"
},
{
"description": "This relationship describes that the source object indicates the target object.",
@ -251,14 +264,16 @@
"format": [
"misp"
],
"name": "authored-by"
"name": "authored-by",,
"opposite": "is-author-of"
},
{
"description": "This relationship describes an object being author by someone.",
"format": [
"misp"
],
"name": "is-author-of"
"name": "is-author-of",
"opposite": "authored-by"
},
{
"description": "This relationship describes the location (of any type) of a specific object.",
@ -272,14 +287,16 @@
"format": [
"misp"
],
"name": "included-in"
"name": "included-in",,
"opposite": "includes"
},
{
"description": "This relationship describes an object that includes an other object.",
"format": [
"misp"
],
"name": "includes"
"name": "includes",
"opposite": "included-in"
},
{
"description": "This relationship describes an object analysed by another object.",
@ -382,14 +399,16 @@
"format": [
"misp"
],
"name": "followed-by"
"name": "followed-by",
"opposite": "preceding-by"
},
{
"description": "This relationship describes an object which is preceded by another object. This can be used when a time reference is missing but a sequence is known.",
"format": [
"misp"
],
"name": "preceding-by"
"name": "preceding-by",
"opposite": "followed-by"
},
{
"description": "This relationship describes an object which triggers another object.",
@ -438,7 +457,8 @@
"format": [
"cert-eu"
],
"name": "used-by"
"name": "used-by",
"opposite": "uses"
},
{
"description": "This relationship describes an object which is affiliated with another object.",
@ -741,14 +761,16 @@
"format": [
"alfred"
],
"name": "downloads"
"name": "downloads",
"opposite": "downloads-from"
},
{
"description": "Represents the semantic link of malware being downloaded from a location.",
"format": [
"alfred"
],
"name": "downloads-from"
"name": "downloads-from",
"opposite": "downloads"
},
{
"description": "Represents the semantic link of an alert generated from a signature.",
@ -840,14 +862,16 @@
"format": [
"alfred"
],
"name": "registered"
"name": "registered",
"opposite": "registered-to"
},
{
"description": "Represents the semantic link of something being registered to.",
"format": [
"alfred"
],
"name": "registered-to"
"name": "registered-to",
"opposite": "registered"
},
{
"description": "Represents the semantic link between HBS Comms and communication addresses.",
@ -1100,14 +1124,16 @@
"format": [
"misp"
],
"name": "leaks"
"name": "leaks",
"opposite": "leaked-by"
},
{
"description": "leaked-by",
"format": [
"misp"
],
"name": "leaked-by"
"name": "leaked-by",
"opposite": "leaks"
},
{
"description": "doxed-by",
@ -1118,4 +1144,4 @@
}
],
"version": 21
}
}