diff --git a/objects/whois/definition.json b/objects/whois/definition.json index bd8d813..320873c 100644 --- a/objects/whois/definition.json +++ b/objects/whois/definition.json @@ -12,6 +12,7 @@ "attributes": { "text": { "description": "Full whois entry", + "disable_correlation": true, "ui-priority": 1, "misp-attribute": "text" }, @@ -42,19 +43,30 @@ }, "creation-date": { "description": "Initial creation of the whois entry", + "disable_correlation": true, "ui-priority": 0, "misp-attribute": "datetime" }, "modification-date": { "description": "Last update of the whois entry", + "disable_correlation": true, "ui-priority": 0, "misp-attribute": "datetime" }, "expiration-date": { "description": "Expiration of the whois entry", + "disable_correlation": true, "ui-priority": 0, "misp-attribute": "datetime" }, + "nameserver": { + "description": "Nameserver", + "ui-priority": 0, + "misp-attribute": "hostname", + "disable_correlation": true, + "multiple": true, + "to_ids": false + }, "domain": { "description": "Domain of the whois entry", "categories": [ @@ -65,7 +77,7 @@ "misp-attribute": "domain" } }, - "version": 6, + "version": 7, "description": "Whois records information for a domain name.", "meta-category": "network", "uuid": "429faea1-34ff-47af-8a00-7c62d3be5a6a",