From 62e782b589713758b18bef8bc071c97c050de394 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Wed, 28 Mar 2018 14:32:53 +0200
Subject: [PATCH] add: Suricata object added with context

---
 objects/suricata/definition.json | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 objects/suricata/definition.json

diff --git a/objects/suricata/definition.json b/objects/suricata/definition.json
new file mode 100644
index 0000000..ddbe458
--- /dev/null
+++ b/objects/suricata/definition.json
@@ -0,0 +1,32 @@
+{
+  "requiredOneOf": [
+    "suricata"
+  ],
+  "attributes": {
+    "comment": {
+      "description": "A description of the Suricata rule.",
+      "ui-priority": 0,
+      "misp-attribute": "comment"
+    },
+    "suricata": {
+      "description": "Suricata rule.",
+      "ui-priority": 0,
+      "misp-attribute": "suricata"
+    },
+    "version": {
+      "description": "Version of the Suricata rule depending where the suricata rule is known to work as expected.",
+      "ui-priority": 0,
+      "misp-attribute": "text"
+    },
+    "ref": {
+      "description": "Reference to the Suricata rule such as origin of the rule or alike.",
+      "misp-attribute": "link",
+      "ui-priority": 0
+    }
+  },
+  "version": 1,
+  "description": "An object describing a Suricata rule along with its version and context",
+  "meta-category": "network",
+  "uuid": "3c177337-fb80-405a-a6c1-1b2ddea8684a",
+  "name": "suricata"
+}