From 849a41f174fc8658e7503467640161ff79c8c016 Mon Sep 17 00:00:00 2001
From: Christian Studer <christian.studer@circl.lu>
Date: Thu, 17 Oct 2024 10:12:46 +0200
Subject: [PATCH] chg: [tor-hiddenservice] Updated template to match the onion
 lookup API format

- Using new attribute type `onion-address` to
  describe the onion address
- Added `language` and `title` to the template
---
 objects/tor-hiddenservice/definition.json | 20 +++++++++++++++++---
 1 file changed, 17 insertions(+), 3 deletions(-)

diff --git a/objects/tor-hiddenservice/definition.json b/objects/tor-hiddenservice/definition.json
index 361c05b..dffa19d 100644
--- a/objects/tor-hiddenservice/definition.json
+++ b/objects/tor-hiddenservice/definition.json
@@ -1,8 +1,8 @@
 {
   "attributes": {
     "address": {
-      "description": "onion address of the Tor node seen.",
-      "misp-attribute": "text",
+      "description": "Onion address of the Tor node seen.",
+      "misp-attribute": "onion-address",
       "ui-priority": 1
     },
     "description": {
@@ -17,11 +17,25 @@
       "misp-attribute": "datetime",
       "ui-priority": 0
     },
+    "language": {
+      "description": "Language(s) detected on the onion address.",
+      "disable_correlation": true,
+      "misp-attribute": "text",
+      "multiple": true,
+      "ui-priority": 0
+    },
     "last-seen": {
       "description": "When the Tor hidden service was seen for the last time.",
       "disable_correlation": true,
       "misp-attribute": "datetime",
       "ui-priority": 0
+    },
+    "title": {
+      "description": "Known title(s) of the Tor onion address.",
+      "disable_correlation": true,
+      "misp-attribute": "text",
+      "multiple": true,
+      "ui-priority": 0
     }
   },
   "description": "Tor hidden service (onion service) object.",
@@ -37,5 +51,5 @@
     "description"
   ],
   "uuid": "cbac07d6-fbe9-43b8-8d91-d515812ce330",
-  "version": 1
+  "version": 2
 }
\ No newline at end of file