MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #409 from matthijsvp/main 

Updated attack-step
pull/410/head
Alexandre Dulaunoy 2023-11-21 15:12:47 +01:00 committed by GitHub
parent d105769d6f fd90274503
commit 8ebd4af6af
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
objects/attack-step/definition.json
View File

@ -26,11 +26,13 @@
"description": "IP destination of the attack step, if any.", "description": "IP destination of the attack step, if any.",
"disable_correlation": true, "disable_correlation": true,
"misp-attribute": "ip-dst", "misp-attribute": "ip-dst",
"multiple": true,
"ui-priority": 1 "ui-priority": 1
}, },
"dst-misc": { "dst-misc": {
"description": "Other type of source of the attack step, if any. This can be e.g. localhost.", "description": "Other type of destination of the attack step, if any. This can be e.g. localhost.",
"misp-attribute": "text", "misp-attribute": "text",
"multiple": true,
"ui-priority": 1 "ui-priority": 1
}, },
"expected-response": { "expected-response": {
@ -50,16 +52,19 @@
"source-domain": { "source-domain": {
"description": "Domain source of the attack step, if any.", "description": "Domain source of the attack step, if any.",
"misp-attribute": "domain", "misp-attribute": "domain",
"multiple": true,
"ui-priority": 1 "ui-priority": 1
}, },
"source-ip": { "source-ip": {
"description": "IP source of the attack step, if any.", "description": "IP source of the attack step, if any.",
"misp-attribute": "ip-src", "misp-attribute": "ip-src",
"multiple": true,
"ui-priority": 1 "ui-priority": 1
}, },
"source-misc": { "source-misc": {
"description": "Other type of source of the attack step, if any. This can be e.g. rotating ip from cloud providers such as AWS, or localhost.", "description": "Other type of source of the attack step, if any. This can be e.g. rotating ip from cloud providers such as AWS, or localhost.",
"misp-attribute": "text", "misp-attribute": "text",
"multiple": true,
"ui-priority": 1 "ui-priority": 1
}, },
"succesful": { "succesful": {