MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #258 from VVX7/master 

chg: [dev] add object properties from #254
pull/262/head
Alexandre Dulaunoy 2020-06-02 19:00:35 +02:00 committed by GitHub
parent 75c56bc3a2 53d2a18811
commit 75b71d6f3b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 105 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

60
objects/twitter-account/definition.json
View File

@ -13,6 +13,11 @@
"multiple": true,
"ui-priority": 1
},
"bio": {
"description": "Displayed name.",
"misp-attribute": "text",
"ui-priority": 1
},
"description": {
"description": "A description of the user.",
"disable_correlation": true,
@ -37,13 +42,13 @@
"ui-priority": 0
},
"followers": {
"description": "number of followers.",
"description": "Number of followers.",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 1
},
"friends": {
"description": "Number of friends.",
"following": {
"description": "Number of accounts this accounts is following.",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 1
@ -59,6 +64,12 @@
"misp-attribute": "text",
"ui-priority": 1
},
"likes": {
"description": "Number of likes this account has.",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 1
},
"link": {
"description": "Original link to the user (supposed harmless).",
"misp-attribute": "link",
@ -76,11 +87,52 @@
"misp-attribute": "text",
"ui-priority": 1
},
"media": {
"description": "Number of images and videos posted.",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 1
},
"name": {
"description": "User's screen name (without the @).",
"misp-attribute": "text",
"ui-priority": 1
},
"private": {
"description": "User verified.",
"misp-attribute": "text",
"sane_default": [
"True",
"False"
],
"ui-priority": 1
},
"profile-banner": {
"description": "A screenshot or exported user avatar.",
"misp-attribute": "attachment",
"ui-priority": 1
},
"profile-banner-url": {
"description": "A link to the user's background image.",
"misp-attribute": "url",
"ui-priority": 1
},
"profile-image-url": {
"description": "A link to the user's avatar.",
"misp-attribute": "url",
"ui-priority": 1
},
"profile_image": {
"description": "A screenshot or exported user avatar.",
"misp-attribute": "attachment",
"ui-priority": 1
},
"tweets": {
"description": "Number of tweets posted.",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 1
},
"url": {
"description": "Original URL location of the user (potentially malicious).",
"misp-attribute": "url",
@ -107,5 +159,5 @@
"link"
],
"uuid": "8066563f-881e-4f6a-9d6c-a9d15b8658bb",
"version": 1
"version": 3
}

19
objects/twitter-list/definition.json
View File

@ -18,11 +18,6 @@
"misp-attribute": "text",
"ui-priority": 1
},
"displayed-name": {
"description": "Displayed name.",
"misp-attribute": "text",
"ui-priority": 1
},
"embedded-link": {
"description": "Link embedded in the description (potentially malicious).",
"misp-attribute": "url",
@ -52,11 +47,23 @@
"misp-attribute": "link",
"ui-priority": 1
},
"member-count": {
"description": "Number of accounts following this list.",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 1
},
"name": {
"description": "List's screen name (without the @).",
"misp-attribute": "text",
"ui-priority": 1
},
"subscriber-count": {
"description": "Number of accounts subscribing to this list.",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 1
},
"url": {
"description": "Original URL location of the list (potentially malicious).",
"misp-attribute": "url",
@ -84,5 +91,5 @@
"link"
],
"uuid": "7ae81d5c-d9d8-4812-88a7-5f14fba241da",
"version": 1
"version": 2
}

42
objects/twitter-post/definition.json
View File

@ -24,6 +24,18 @@
"multiple": true,
"ui-priority": 0
},
"favorite-count": {
"description": "Number of favorites.",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 1
},
"geo": {
"description": "Geolocation data.",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 1
},
"hashtag": {
"description": "Hashtag embedded in the tweet",
"misp-attribute": "text",
@ -61,6 +73,23 @@
"multiple": true,
"ui-priority": 1
},
"name": {
"description": "Name of the account that posted this tweet.",
"misp-attribute": "text",
"ui-priority": 0
},
"possibly-sensitive": {
"description": "Does this post contain sensitive content?",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 1
},
"possibly-sensitive-appealable": {
"description": "Is the sensitive content of this post appealable?",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 1
},
"post": {
"description": "Raw text of the post.",
"misp-attribute": "text",
@ -76,6 +105,12 @@
"misp-attribute": "datetime",
"ui-priority": 0
},
"retweet-count": {
"description": "Number of retweets.",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 1
},
"source": {
"description": "Source of tweet (android, web etc).",
"misp-attribute": "text",
@ -92,11 +127,6 @@
"misp-attribute": "text",
"ui-priority": 0
},
"user-name": {
"description": "Name of the account that posted this tweet.",
"misp-attribute": "text",
"ui-priority": 0
},
"username-quoted": {
"description": "Username who is quoted in the tweet.",
"misp-attribute": "text",
@ -116,5 +146,5 @@
"attachment"
],
"uuid": "d1214031-ce1b-4a35-bd33-644c707bda2e",
"version": 1
"version": 2
}