Merge pull request #130 from deralexxx/patch-2

new misp object for a timesketch message
2018-11-23 15:42:48 +01:00 · 2018-11-23 15:42:48 +01:00 · 7fe77c02af
parent 7808850ce2 e44dd16b18
commit 7fe77c02af
1 changed files with 26 additions and 0 deletions
--- a/objects/timesketch_message/definition.json
+++ b/objects/timesketch_message/definition.json
@ -0,0 +1,26 @@
+{
+  "required": [
+    "datetime",
+    "message"
+  ],
+  "attributes": {
+    "datetime": {
+      "description": "datetime of the message",
+      "disable_correlation": true,
+      "ui-priority": 1,
+      "misp-attribute": "datetime",
+      "recommended": true
+    },
+    "message": {
+      "description": "message",
+      "disable_correlation": true,
+      "ui-priority": 0,
+      "misp-attribute": "text"
+    }
+  },
+  "version": 1,
+  "description": "A timesketch message entry.",
+  "meta-category": "misc",
+  "uuid": "ef27fb19-7e71-43e0-b6f6-6f03ab67666f",
+  "name": "timesketch_message"
+}