MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

Passive DNS object added

pull/2/head
Alexandre Dulaunoy 2016-02-13 18:19:27 +01:00
parent 2fe9742251
commit 7c30ab3977
1 changed files with 56 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

56
objects/passive-dns/definition.json Normal file
View File

@ -0,0 +1,56 @@
{
"name": "passive-dns",
"meta-category": "network",
"description": "Passive DNS records as expressed in draft-dulaunoy-dnsop-passive-dns-cof-01",
"version": 1,
"attributes" :
{
"rrtype": {
"misp-attribute": "text",
"misp-usage-frequency": 1,
"categories": ["Network activity","External analysis"]
},
"rrname": {
"misp-attribute": "hostname",
"misp-usage-frequency": 1,
"categories": ["Network activity","External analysis"]
},
"time_first": {
"misp-attribute": "datetime",
"misp-usage-frequency": 0
},
"time_last": {
"misp-attribute": "datetime",
"misp-usage-frequency": 0
},
"origin": {
"misp-attribute": "text",
"misp-usage-frequency": 0
},
"count": {
"misp-attribute": "counter",
"misp-usage-frequency": 0
},
"sensor_id": {
"misp-attribute": "text",
"misp-usage-frequency": 0
},
"bailiwick": {
"misp-attribute": "text",
"misp-usage-frequency": 0
},
"zone_time_first": {
"misp-attribute": "datetime",
"misp-usage-frequency": 0
},
"zone_time_last": {
"misp-attribute": "datetime",
"misp-usage-frequency": 0
},
"text": {
"misp-attribute": "text",
"misp-usage-frequency": 0
}
},
"required": ["rrtype","rrname"]
}