whois - adds nameserver attributes

adding nameserver attributes as a whois response contains those
pull/61/head
Christophe Vandeplas 2017-12-20 15:22:45 +01:00
parent 871b86e35f
commit 9de7423501
1 changed files with 13 additions and 1 deletions

View File

@ -12,6 +12,7 @@
"attributes": {
"text": {
"description": "Full whois entry",
"disable_correlation": true,
"ui-priority": 1,
"misp-attribute": "text"
},
@ -42,19 +43,30 @@
},
"creation-date": {
"description": "Initial creation of the whois entry",
"disable_correlation": true,
"ui-priority": 0,
"misp-attribute": "datetime"
},
"modification-date": {
"description": "Last update of the whois entry",
"disable_correlation": true,
"ui-priority": 0,
"misp-attribute": "datetime"
},
"expiration-date": {
"description": "Expiration of the whois entry",
"disable_correlation": true,
"ui-priority": 0,
"misp-attribute": "datetime"
},
"nameserver": {
"description": "Nameserver",
"ui-priority": 0,
"misp-attribute": "hostname",
"disable_correlation": true,
"multiple": true,
"to_ids": false
},
"domain": {
"description": "Domain of the whois entry",
"categories": [
@ -65,7 +77,7 @@
"misp-attribute": "domain"
}
},
"version": 6,
"version": 7,
"description": "Whois records information for a domain name.",
"meta-category": "network",
"uuid": "429faea1-34ff-47af-8a00-7c62d3be5a6a",