chg: Update email template

objects/email/definition.json

@@ -3,7 +3,7 @@
   "uuid": "a0c666e0-fc65-4be8-b48f-3423d788b552",
   "meta-category": "network",
   "description": "Email object describing an email with meta-information",
-  "version": 10,
+  "version": 11,
   "attributes": {
     "reply-to": {
       "description": "Email address the reply will be sent to",
@@ -16,6 +16,7 @@
     "message-id": {
       "description": "Message ID",
       "misp-attribute": "email-message-id",
+      "disable_correlation": true,
       "ui-priority": 0,
       "categories": [
         "Payload delivery"
@@ -24,6 +25,7 @@
     "to": {
       "description": "Destination email address",
       "misp-attribute": "email-dst",
+      "disable_correlation": true,
       "ui-priority": 1,
       "categories": [
         "Payload delivery"
@@ -33,6 +35,7 @@
     "cc": {
       "description": "Carbon copy",
       "misp-attribute": "email-dst",
+      "disable_correlation": true,
       "ui-priority": 1,
       "categories": [
         "Payload delivery"
@@ -59,6 +62,7 @@
     "screenshot": {
       "description": "Screenshot of email",
       "misp-attribute": "attachment",
+      "disable_correlation": true,
       "ui-priority": 1,
       "categories": [
         "External analysis"
@@ -76,6 +80,7 @@
     "x-mailer": {
       "description": "X-Mailer generally tells the program that was used to draft and send the original email",
       "misp-attribute": "email-x-mailer",
+      "disable_correlation": true,
       "ui-priority": 0,
       "categories": [
         "Payload delivery"
@@ -84,6 +89,7 @@
     "header": {
       "description": "Full headers",
       "misp-attribute": "email-header",
+      "disable_correlation": true,
       "ui-priority": 0,
       "categories": [
         "Payload delivery"
@@ -102,6 +108,7 @@
     "mime-boundary": {
       "description": "MIME Boundary",
       "misp-attribute": "email-mime-boundary",
+      "disable_correlation": true,
       "ui-priority": 0,
       "categories": [
         "Payload delivery"
@@ -110,6 +117,7 @@
     "thread-index": {
       "description": "Identifies a particular conversation thread",
       "misp-attribute": "email-thread-index",
+      "disable_correlation": true,
       "ui-priority": 0,
       "categories": [
         "Payload delivery"
@@ -125,7 +133,7 @@
     },
     "return-path": {
       "description": "Message return path",
-      "misp-attribute": "text",
+      "misp-attribute": "email-src",
       "ui-priority": 1,
       "categories": [
         "Payload delivery"
@@ -142,14 +150,22 @@
     "email-body": {
       "description": "Body of the email",
       "misp-attribute": "email-body",
+      "disable_correlation": true,
       "ui-priority": 1,
       "categories": [
         "Payload delivery"
       ]
     },
+    "user-agent": {
+      "description": "User Agent of the sender",
+      "misp-attribute": "text",
+      "ui-priority": 0,
+      "disable_correlation": true
+    },
     "eml": {
       "description": "Full EML",
       "misp-attribute": "attachment",
+      "disable_correlation": true,
       "ui-priority": 1
     }
   },