MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

Disable correlation for IntelMQ time fields

pull/416/head
Christos Arvanitis 2024-03-05 11:22:17 +01:00
parent 173af552aa
commit a367c43eb9
2 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
objects/intelmq_event/definition.json
View File

@ -405,11 +405,13 @@
}, },
"time.observation": { "time.observation": {
"description": "The time the collector of the local instance processed (observed) the event.", "description": "The time the collector of the local instance processed (observed) the event.",
"disable_correlation": true,
"misp-attribute": "datetime", "misp-attribute": "datetime",
"ui-priority": 1 "ui-priority": 1
}, },
"time.source": { "time.source": {
"description": "The time of occurence of the event as reported the feed (source).", "description": "The time of occurence of the event as reported the feed (source).",
"disable_correlation": true,
"misp-attribute": "datetime", "misp-attribute": "datetime",
"ui-priority": 1 "ui-priority": 1
}, },

1
objects/intelmq_report/definition.json
View File

@ -47,6 +47,7 @@
}, },
"time.observation": { "time.observation": {
"description": "The time the collector of the local instance processed (observed) the event.", "description": "The time the collector of the local instance processed (observed) the event.",
"disable_correlation": true,
"misp-attribute": "datetime", "misp-attribute": "datetime",
"ui-priority": 1 "ui-priority": 1
} }