MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

add: [intrusion-set] Added `first_seen` & `last_seen` attributes

chrisr3d_patch
Christian Studer 2023-11-09 12:10:52 +01:00
parent 4828fbad62
commit 8fb566fc60
No known key found for this signature in database
GPG Key ID: 6BBED1B63A6D639F
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
objects/intrusion-set/definition.json
View File

@ -11,6 +11,11 @@
"misp-attribute": "text",
"ui-priority": 1
},
"first_seen": {
"description": "The time that the intrusion set was first seen.",
"misp-attribute": "datetime",
"ui-priority": 0
},
"goals": {
"description": "The high-level goals of this Intrusion Set, namely, what are they trying to do. For example, they may be motivated by personal gain, but their goal is to steal credit card numbers. To do this, they may execute specific Campaigns that have detailed objectives like compromising point of sale systems at a large retailer. Another example: to gain information about latest merger and IPO information from ACME Bank.",
"disable_correlation": true,
@ -18,6 +23,11 @@
"multiple": true,
"ui-priority": 1
},
"last_seen": {
"description": "The time that the intrusion set was last seen.",
"misp-attribute": "datetime",
"ui-priority": 0
},
"name": {
"description": "A name used to identify this Intrusion Set.",
"misp-attribute": "text",