mirror of https://github.com/MISP/misp-objects
new: [sigma] a sigma attribute exists in MISP but the object was
missing to add some additional meta information.pull/368/head
parent
50f61a03be
commit
734d85337d
|
@ -0,0 +1,47 @@
|
|||
{
|
||||
"attributes": {
|
||||
"comment": {
|
||||
"description": "A description of the Sigma rule.",
|
||||
"misp-attribute": "comment",
|
||||
"ui-priority": 0
|
||||
},
|
||||
"context": {
|
||||
"description": "Context where the Sigma rule can be applied",
|
||||
"disable_correlation": true,
|
||||
"misp-attribute": "text",
|
||||
"multiple": true,
|
||||
"sane_default": [
|
||||
"all",
|
||||
"disk",
|
||||
"memory",
|
||||
"network",
|
||||
"dns"
|
||||
],
|
||||
"ui-priority": 0
|
||||
},
|
||||
"reference": {
|
||||
"description": "Reference/origin of the Sigma rule.",
|
||||
"misp-attribute": "link",
|
||||
"ui-priority": 0
|
||||
},
|
||||
"sigma": {
|
||||
"description": "Sigma rule.",
|
||||
"misp-attribute": "sigma",
|
||||
"ui-priority": 0
|
||||
},
|
||||
"sigma-rule-name": {
|
||||
"description": "Sigma rule name.",
|
||||
"misp-attribute": "text",
|
||||
"ui-priority": 0
|
||||
}
|
||||
},
|
||||
"description": "An object describing a Sigma rule (or a Sigma rule name).",
|
||||
"meta-category": "misc",
|
||||
"name": "sigma",
|
||||
"requiredOneOf": [
|
||||
"sigma",
|
||||
"sigma-rule-name"
|
||||
],
|
||||
"uuid": "aa21a3cd-ab2c-442a-9999-a5e6626591ec",
|
||||
"version": 1
|
||||
}
|
Loading…
Reference in New Issue