MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

Improved Tor node object to include support of the new Tor monitoring

pull/17/head
Alexandre Dulaunoy 2017-07-06 14:57:32 +02:00
parent 92fbb38616
commit 6e88746a67
1 changed files with 41 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
objects/tor-node/definition.json
View File

@ -16,8 +16,20 @@
"ui-priority": 1, "ui-priority": 1,
"misp-attribute": "text" "misp-attribute": "text"
}, },
"nickname": {
"description": "router's nickname.",
"disable_correlation": false,
"ui-priority": 0,
"misp-attribute": "text"
},
"fingerprint": {
"description": "router's fingerprint.",
"disable_correlation": false,
"ui-priority": 0,
"misp-attribute": "text"
},
"text": { "text": {
"description": "Tor node comment", "description": "Tor node comment.",
"disable_correlation": true, "disable_correlation": true,
"ui-priority": 1, "ui-priority": 1,
"misp-attribute": "text" "misp-attribute": "text"
@ -27,6 +39,27 @@
"ui-priority": 1, "ui-priority": 1,
"misp-attribute": "ip-src" "misp-attribute": "ip-src"
}, },
"flags": {
"description": "list of flag associated with the node.",
"ui-priority": 0,
"misp-attribute": "text"
},
"version": {
"description": "parsed version of tor, this is None if the relay's using a new versioning scheme.",
"ui-priority": 0,
"misp-attribute": "text"
},
"version_line": {
"description": "versioning information reported by the node.",
"ui-priority": 0,
"misp-attribute": "text"
},
"published": {
"description": "router's publication time. This can be different from first-seen and last-seen.",
"disable_correlation": true,
"ui-priority": 0,
"misp-attribute": "datetime"
},
"last-seen": { "last-seen": {
"description": "When the Tor node designed by the IP address has been seen for the last time.", "description": "When the Tor node designed by the IP address has been seen for the last time.",
"disable_correlation": true, "disable_correlation": true,
@ -38,9 +71,15 @@
"disable_correlation": true, "disable_correlation": true,
"ui-priority": 0, "ui-priority": 0,
"misp-attribute": "datetime" "misp-attribute": "datetime"
},
"document": {
"description": "Raw document from the consensus.",
"disable_correlation": true,
"ui-priority": 0,
"misp-attribute": "text"
} }
}, },
"version": 1, "version": 2,
"description": "Tor node (which protects your privacy on the internet by hiding the connection between users Internet address and the services used by the users) description which are part of the Tor network at a time.", "description": "Tor node (which protects your privacy on the internet by hiding the connection between users Internet address and the services used by the users) description which are part of the Tor network at a time.",
"meta-category": "misc", "meta-category": "misc",
"uuid": "a5fde1c8-318e-4658-a3ea-85ea000bdd33", "uuid": "a5fde1c8-318e-4658-a3ea-85ea000bdd33",