From ff33050ad682e41540342d183ec45ec658c413df Mon Sep 17 00:00:00 2001 From: Matthieu Faou Date: Wed, 9 Oct 2024 13:32:17 +0200 Subject: [PATCH 1/6] Added 6 sectors to the victim object --- objects/victim/definition.json | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/objects/victim/definition.json b/objects/victim/definition.json index 04665be..1061969 100644 --- a/objects/victim/definition.json +++ b/objects/victim/definition.json @@ -89,6 +89,7 @@ "energy", "engineering", "entertainment", + "faith-based organization", "financial services", "government local", "government national", @@ -100,6 +101,8 @@ "infrastructure", "insurance", "international organization", + "justice", + "law enforcement", "legal", "manufacturing", "mining", @@ -109,6 +112,9 @@ "retail", "technology", "telecommunications", + "telecommunications - internet service provider", + "telecommunications - managed service provider", + "telecommunications - hosting provider", "think tank", "transportation", "utilities" @@ -132,4 +138,4 @@ ], "uuid": "a8806e40-39ad-435f-be02-ac2a13d6fc7d", "version": 9 -} \ No newline at end of file +} From 191b6b069103e19e3d8da9d0680609e90409f8d6 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Wed, 16 Oct 2024 18:00:21 +0200 Subject: [PATCH 2/6] new: [object] dom-hash object added --- objects/dom-hash/definition.json | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 objects/dom-hash/definition.json diff --git a/objects/dom-hash/definition.json b/objects/dom-hash/definition.json new file mode 100644 index 0000000..d58460e --- /dev/null +++ b/objects/dom-hash/definition.json @@ -0,0 +1,24 @@ +{ + "attributes": { + "dom-hash": { + "description": "dom-hash value of the url(s)", + "misp-attribute": "dom-hash", + "ui-priority": 0 + }, + "url": { + "description": "Full URL of the dom-hashed HTML structure", + "misp-attribute": "url", + "multiple": true, + "ui-priority": 1 + } + }, + "description": "dom-hash object to describe similar structure of HTML pages.", + "meta-category": "dom-hash", + "name": "url", + "requiredOneOf": [ + "url", + "dom-hash" + ], + "uuid": "c7771a39-afa5-4ecb-8d67-ca87ff60236d", + "version": 1 +} \ No newline at end of file From 630733e8082cb21063123b518a70f3673b56ae19 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Wed, 16 Oct 2024 18:02:38 +0200 Subject: [PATCH 3/6] chg: [schema] updated with the new dom-hash attribute type --- schema_objects.json | 1 + 1 file changed, 1 insertion(+) diff --git a/schema_objects.json b/schema_objects.json index 7095137..7ac0300 100644 --- a/schema_objects.json +++ b/schema_objects.json @@ -70,6 +70,7 @@ "dns-soa-email", "domain", "domain|ip", + "dom-hash", "email", "email-attachment", "email-body", From 1777e69bc88a951086a4e26ff28218624b4170b3 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Wed, 16 Oct 2024 18:04:34 +0200 Subject: [PATCH 4/6] chg: [fix] schema fixed --- schema_objects.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/schema_objects.json b/schema_objects.json index 7ac0300..8f81d3f 100644 --- a/schema_objects.json +++ b/schema_objects.json @@ -70,7 +70,7 @@ "dns-soa-email", "domain", "domain|ip", - "dom-hash", + "dom-hash", "email", "email-attachment", "email-body", From 623f33936434f4e67078200a8b21f1270126c181 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Wed, 16 Oct 2024 18:07:35 +0200 Subject: [PATCH 5/6] fix: [dom-hash] category fixed --- objects/dom-hash/definition.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/objects/dom-hash/definition.json b/objects/dom-hash/definition.json index d58460e..ec2a4ff 100644 --- a/objects/dom-hash/definition.json +++ b/objects/dom-hash/definition.json @@ -13,12 +13,12 @@ } }, "description": "dom-hash object to describe similar structure of HTML pages.", - "meta-category": "dom-hash", + "meta-category": "file", "name": "url", "requiredOneOf": [ "url", "dom-hash" ], "uuid": "c7771a39-afa5-4ecb-8d67-ca87ff60236d", - "version": 1 + "version": 2 } \ No newline at end of file From 2e8d9d91f22907e5d6b17fd597af8ab494823b4e Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Wed, 16 Oct 2024 18:09:59 +0200 Subject: [PATCH 6/6] chg: [victim] jq and version updated --- objects/victim/definition.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/objects/victim/definition.json b/objects/victim/definition.json index 1061969..1f38566 100644 --- a/objects/victim/definition.json +++ b/objects/victim/definition.json @@ -137,5 +137,5 @@ "sectors" ], "uuid": "a8806e40-39ad-435f-be02-ac2a13d6fc7d", - "version": 9 -} + "version": 10 +} \ No newline at end of file