Merge branch 'Delta-Sierra-master'

objects/command-line/definition.json

@@ -0,0 +1,20 @@
+{
+  "attributes": {
+    "value": {
+      "description": "command code",
+      "ui-priority": 1,
+      "misp-attribute": "text",
+      "multiple": true
+    },
+    "description": {
+      "description": "description of the command",
+      "ui-priority": 1,
+      "misp-attribute": "text"
+    }
+  },
+  "version": 1,
+  "description": "Command line and option related to a software malicious or not to execute specific commands.",
+  "meta-category": "misc",
+  "uuid": "88ebe222-d3cc-11e9-875d-7f13f460adaf",
+  "name": "command-line"
+}

objects/command/definition.json

@@ -0,0 +1,37 @@
+{
+  "attributes": {
+    "location": {
+      "description": "Location of the command functionality",
+      "ui-priority": 1,
+      "misp-attribute": "text",
+      "disable_correlation": true,
+      "sane_default": [
+        "Bundled",
+        "Module",
+        "Libraries",
+        "Unknown"
+      ]
+    },
+    "trigger": {
+      "description": "How the commands are triggered",
+      "ui-priority": 1,
+      "misp-attribute": "text",
+      "disable_correlation": true,
+      "sane_default": [
+        "Local",
+        "Network",
+        "Unknown"
+      ]
+    },
+    "description": {
+      "description": "Description of the command functionalities",
+      "ui-priority": 1,
+      "misp-attribute": "text"
+    }
+  },
+  "version": 1,
+  "description": "Command functionalities related to a software malicious or not to execute specific commands. Command-line are attached to this object for the related commands.",
+  "meta-category": "misc",
+  "uuid": "21ad70d8-d397-11e9-9ea7-43b2d5f6a6e3",
+  "name": "command"
+}

objects/impersonation/definition.json

@@ -0,0 +1,77 @@
+{
+  "attributes": {
+    "type-of-account": {
+      "description": "Type of the impersonated account",
+      "ui-priority": 1,
+      "misp-attribute": "text",
+      "disable_correlation": true,
+      "sane_default": [
+        "Twitter",
+        "Facebook",
+        "LinkedIn",
+        "Reddit",
+        "Google+",
+        "Instagram",
+        "Forum",
+        "Other"
+      ]
+    },
+    "account-url": {
+      "description": "url of the impersonating account",
+      "ui-priority": 1,
+      "misp-attribute": "url"
+    },
+    "account-name": {
+      "description": "Name of the impersonating account",
+      "ui-priority": 1,
+      "misp-attribute": "text"
+    },
+    "impersonated-account-url": {
+      "description": "url of the impersonated account",
+      "ui-priority": 1,
+      "misp-attribute": "link"
+    },
+    "impersonated-account-name": {
+      "description": "Name of the impersonated account",
+      "ui-priority": 1,
+      "misp-attribute": "text"
+    },
+    "real-name": {
+      "description": "Real name of the impersonated person or entity",
+      "ui-priority": 1,
+      "misp-attribute": "text"
+    },
+    "type": {
+      "description": "Type of the account",
+      "ui-priority": 1,
+      "misp-attribute": "text",
+      "disable_correlation": true,
+      "sane_default": [
+        "Person",
+        "Association",
+        "Enterprise",
+        "Other"
+      ]
+    },
+    "objective": {
+      "description": "Objective of the impersonation",
+      "ui-priority": 1,
+      "misp-attribute": "text",
+      "disable_correlation": true,
+      "multiple": true,
+      "sane_default": [
+        "Information stealing",
+        "Disinformation",
+        "Distrusting",
+        "Advertising",
+        "Parody",
+        "Other"
+      ]
+    }
+  },
+  "version": 1,
+  "description": "Represent an impersonating account",
+  "meta-category": "misc",
+  "uuid": "01833a92-d2ff-11e9-8016-d3b988153702",
+  "name": "impersonation"
+}