From b657128758e027fd6d42f4af47046c7df2a7cb03 Mon Sep 17 00:00:00 2001 From: David Cruciani Date: Thu, 14 Dec 2023 15:58:46 +0100 Subject: [PATCH 1/2] new: [object] flowintel-cm --- objects/flowintel-cm-case/definition.json | 77 +++++++++++++++++++++++ objects/flowintel-cm-task/definition.json | 72 +++++++++++++++++++++ 2 files changed, 149 insertions(+) create mode 100644 objects/flowintel-cm-case/definition.json create mode 100644 objects/flowintel-cm-task/definition.json diff --git a/objects/flowintel-cm-case/definition.json b/objects/flowintel-cm-case/definition.json new file mode 100644 index 0000000..c5a087b --- /dev/null +++ b/objects/flowintel-cm-case/definition.json @@ -0,0 +1,77 @@ +{ + "attributes": { + "case-owner-org-name": { + "description": "Name of the organisation that created the case.", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 0 + }, + "case-owner-org-uuid": { + "description": "UUID of the organisation that created the case.", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 0 + }, + "creation-date": { + "description": "Creation date of the case", + "disable_correlation": true, + "misp-attribute": "datetime", + "ui-priority": 0 + }, + "deadline": { + "description": "Deadline of the case", + "disable_correlation": true, + "misp-attribute": "datetime", + "ui-priority": 0 + }, + "description": { + "description": "A description of the case", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 0 + }, + "finish-date": { + "description": "Finish date of the case", + "disable_correlation": true, + "misp-attribute": "datetime", + "ui-priority": 0 + }, + "recurring-type": { + "description": "Recurring type", + "disable_correlation": true, + "misp-attribute": "text", + "sane_default": [ + "once", + "weekly", + "daily", + "monthly" + ], + "ui-priority": 0 + }, + "status": { + "description": "Status of the case", + "disable_correlation": true, + "misp-attribute": "text", + "sane_default": [ + "created", + "on going", + "recurring", + "unavailable", + "rejected", + "finished" + ], + "ui-priority": 0 + }, + "title": { + "description": "Title of the case", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 1 + } + }, + "description": "A case as defined by flowintel-cm.", + "meta-category": "misc", + "name": "flowintel-cm-case", + "uuid": "19df57c7-b315-4fd2-84e5-d81ab221425e", + "version": 1 +} \ No newline at end of file diff --git a/objects/flowintel-cm-task/definition.json b/objects/flowintel-cm-task/definition.json new file mode 100644 index 0000000..95104a0 --- /dev/null +++ b/objects/flowintel-cm-task/definition.json @@ -0,0 +1,72 @@ +{ + "attributes": { + "creation-date": { + "description": "Creation date of the task", + "disable_correlation": true, + "misp-attribute": "datetime", + "ui-priority": 0 + }, + "deadline": { + "description": "Deadline of the task", + "disable_correlation": true, + "misp-attribute": "datetime", + "ui-priority": 0 + }, + "description": { + "description": "A description of the task", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 0 + }, + "file": { + "description": "File", + "disable_correlation": true, + "misp-attribute": "attachment", + "multiple": true, + "ui-priority": 0 + }, + "finish-date": { + "description": "Finish date of the task", + "disable_correlation": true, + "misp-attribute": "datetime", + "ui-priority": 0 + }, + "notes": { + "description": "Notes of the task", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 0 + }, + "status": { + "description": "Status of the task", + "disable_correlation": true, + "misp-attribute": "text", + "sane_default": [ + "created", + "on going", + "recurring", + "unavailable", + "rejected", + "finished" + ], + "ui-priority": 0 + }, + "title": { + "description": "Title of the task", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 1 + }, + "url": { + "description": "An url to an external tool", + "disable_correlation": true, + "misp-attribute": "url", + "ui-priority": 0 + } + }, + "description": "A task as defined by flowintel-cm.", + "meta-category": "misc", + "name": "flowintel-cm-task", + "uuid": "2f525f6e-d3f2-4cb9-9ca0-f1160d99397d", + "version": 1 +} \ No newline at end of file From 156fa7a07e809390ea24456309986a672a5eed47 Mon Sep 17 00:00:00 2001 From: David Cruciani Date: Thu, 14 Dec 2023 16:14:44 +0100 Subject: [PATCH 2/2] chg: [flowintel] typo + uuid+origin-url --- objects/flowintel-cm-case/definition.json | 14 +++++++++++++- objects/flowintel-cm-task/definition.json | 14 +++++++++++++- 2 files changed, 26 insertions(+), 2 deletions(-) diff --git a/objects/flowintel-cm-case/definition.json b/objects/flowintel-cm-case/definition.json index c5a087b..fc5f2b5 100644 --- a/objects/flowintel-cm-case/definition.json +++ b/objects/flowintel-cm-case/definition.json @@ -12,6 +12,12 @@ "misp-attribute": "text", "ui-priority": 0 }, + "case-uuid": { + "description": "UUID of the case", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 1 + }, "creation-date": { "description": "Creation date of the case", "disable_correlation": true, @@ -36,6 +42,12 @@ "misp-attribute": "datetime", "ui-priority": 0 }, + "origin-url": { + "description": "Origin of the case", + "disable_correlation": true, + "misp-attribute": "url", + "ui-priority": 1 + }, "recurring-type": { "description": "Recurring type", "disable_correlation": true, @@ -54,7 +66,7 @@ "misp-attribute": "text", "sane_default": [ "created", - "on going", + "ongoing", "recurring", "unavailable", "rejected", diff --git a/objects/flowintel-cm-task/definition.json b/objects/flowintel-cm-task/definition.json index 95104a0..334d6cc 100644 --- a/objects/flowintel-cm-task/definition.json +++ b/objects/flowintel-cm-task/definition.json @@ -37,13 +37,19 @@ "misp-attribute": "text", "ui-priority": 0 }, + "origin-url": { + "description": "Origin of the task", + "disable_correlation": true, + "misp-attribute": "url", + "ui-priority": 1 + }, "status": { "description": "Status of the task", "disable_correlation": true, "misp-attribute": "text", "sane_default": [ "created", - "on going", + "ongoing", "recurring", "unavailable", "rejected", @@ -51,6 +57,12 @@ ], "ui-priority": 0 }, + "task-uuid": { + "description": "UUID of the task", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 1 + }, "title": { "description": "Title of the task", "disable_correlation": true,