MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

add: [network-socket] Added MAC address attributes 

- Even though they are not exactly part of the
  socket fields, it could be interesting to have
  them to have the information about them like
  they are described within the packets that are
  sent using the socket
pull/391/head
Christian Studer 2023-03-31 11:30:33 +02:00
parent b1b7981854
commit 9e4afdfb7a
No known key found for this signature in database
GPG Key ID: 6BBED1B63A6D639F
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
objects/network-socket/definition.json
View File

@ -172,6 +172,16 @@
"misp-attribute": "datetime", "misp-attribute": "datetime",
"ui-priority": 1 "ui-priority": 1
}, },
"mac-dst": {
"description": "Destination MAC address as it is included in the packets sent",
"misp-attribute": "mac-address",
"ui-priority": 1
},
"mac-src": {
"description": "Source (local) MAC address as it is included in the packets sent",
"misp-attribute": "mac-address",
"ui-priority": 1
},
"option": { "option": {
"description": "Option on the socket connection.", "description": "Option on the socket connection.",
"misp-attribute": "text", "misp-attribute": "text",