From da1d90ab8a0c4bf25346868bb19889ce0bd76d72 Mon Sep 17 00:00:00 2001 From: Alexandre De Oliveira Date: Fri, 18 Mar 2022 12:08:13 +0100 Subject: [PATCH 1/4] Add fields related to GT --- objects/ss7-attack/definition.json | 44 +++++++++++++++++++++++++++++- 1 file changed, 43 insertions(+), 1 deletion(-) diff --git a/objects/ss7-attack/definition.json b/objects/ss7-attack/definition.json index f4d2045..4c0c7b3 100644 --- a/objects/ss7-attack/definition.json +++ b/objects/ss7-attack/definition.json @@ -278,6 +278,26 @@ "misp-attribute": "text", "ui-priority": 0 }, + "SccpCdGT-Country": { + "description": "Country in which SCCP CDGT is registered.", + "misp-attribute": "text", + "ui-priority": 0 + }, + "SccpCdGT-CountryISO2": { + "description": "Code ISO 3166-1 alpha-2 from which the SCCP CDGT is allocated.", + "misp-attribute": "text", + "ui-priority": 0 + }, + "SccpCdGT-OperatorName": { + "description": "Operator Name under which the SCCP CDGT is registered.", + "misp-attribute": "text", + "ui-priority": 0 + }, + "SccpCdGT-TADIG": { + "description": "TADIG under which the SCCP CDGT is registered.", + "misp-attribute": "text", + "ui-priority": 0 + }, "SccpCdPC": { "description": "Signaling Connection Control Part (SCCP) CdPC - Phone number.", "misp-attribute": "text", @@ -295,6 +315,28 @@ "multiple": true, "ui-priority": 0 }, + "SccpCgGT-Country": { + "description": "Country in which SCCP CGGT is registered.", + "misp-attribute": "text", + "multiple": true, + "ui-priority": 0 + }, + "SccpCgGT-CountryISO2": { + "description": "Allocated Code ISO 3166-1 alpha-2 for the SCCP CGGT.", + "misp-attribute": "text", + "ui-priority": 0 + }, + "SccpCgGT-OperatorName": { + "description": "Operator Name under which the SCCP CGGT is registered.", + "misp-attribute": "text", + "ui-priority": 0 + }, + "SccpCgGT-TADIG": { + "description": "TADIG under which the SCCP CGGT is registered.", + "misp-attribute": "text", + "multiple": true, + "ui-priority": 0 + }, "SccpCgPC": { "description": "Signaling Connection Control Part (SCCP) CgPC - Phone number.", "misp-attribute": "text", @@ -329,4 +371,4 @@ ], "uuid": "f3493d8b-a7ab-48d0-a775-046c4d64d782", "version": 4 -} \ No newline at end of file +} From df2b900c75bc9e0f53d8a98b818e6c4aaab8848f Mon Sep 17 00:00:00 2001 From: Alexandre De Oliveira Date: Fri, 18 Mar 2022 12:12:04 +0100 Subject: [PATCH 2/4] Run the ./jq_all_the_things.sh --- objects/ss7-attack/definition.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/objects/ss7-attack/definition.json b/objects/ss7-attack/definition.json index 4c0c7b3..de71cb9 100644 --- a/objects/ss7-attack/definition.json +++ b/objects/ss7-attack/definition.json @@ -371,4 +371,4 @@ ], "uuid": "f3493d8b-a7ab-48d0-a775-046c4d64d782", "version": 4 -} +} \ No newline at end of file From e2da981c9451333b44ee388c22c91be3aa1a853d Mon Sep 17 00:00:00 2001 From: Alexandre De Oliveira Date: Fri, 18 Mar 2022 12:15:58 +0100 Subject: [PATCH 3/4] Update definition.json --- objects/ss7-attack/definition.json | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/objects/ss7-attack/definition.json b/objects/ss7-attack/definition.json index de71cb9..efbf4a8 100644 --- a/objects/ss7-attack/definition.json +++ b/objects/ss7-attack/definition.json @@ -276,6 +276,7 @@ "SccpCdGT": { "description": "Signaling Connection Control Part (SCCP) CdGT - Phone number.", "misp-attribute": "text", + "multiple": true, "ui-priority": 0 }, "SccpCdGT-Country": { @@ -318,7 +319,6 @@ "SccpCgGT-Country": { "description": "Country in which SCCP CGGT is registered.", "misp-attribute": "text", - "multiple": true, "ui-priority": 0 }, "SccpCgGT-CountryISO2": { @@ -334,7 +334,6 @@ "SccpCgGT-TADIG": { "description": "TADIG under which the SCCP CGGT is registered.", "misp-attribute": "text", - "multiple": true, "ui-priority": 0 }, "SccpCgPC": { @@ -371,4 +370,4 @@ ], "uuid": "f3493d8b-a7ab-48d0-a775-046c4d64d782", "version": 4 -} \ No newline at end of file +} From e54cfa0e4c066555da8e18637273a80d901b258f Mon Sep 17 00:00:00 2001 From: Alexandre De Oliveira Date: Fri, 18 Mar 2022 12:17:41 +0100 Subject: [PATCH 4/4] modified by ./jq_all_the_things.sh --- objects/ss7-attack/definition.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/objects/ss7-attack/definition.json b/objects/ss7-attack/definition.json index efbf4a8..a01fadf 100644 --- a/objects/ss7-attack/definition.json +++ b/objects/ss7-attack/definition.json @@ -370,4 +370,4 @@ ], "uuid": "f3493d8b-a7ab-48d0-a775-046c4d64d782", "version": 4 -} +} \ No newline at end of file