From a50986361fdab1d439a75530733606c22fe7e4be Mon Sep 17 00:00:00 2001 From: molley Date: Tue, 2 Apr 2019 18:26:00 +0100 Subject: [PATCH] Username is often utilised alongside a credential Username can often identify malicious behavior, and is usually part of the credential tuple - it can also be used to highlight common user accounts without password/api key --- objects/credential/definition.json | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/objects/credential/definition.json b/objects/credential/definition.json index 5ea36ea..0a4f7a9 100644 --- a/objects/credential/definition.json +++ b/objects/credential/definition.json @@ -1,6 +1,7 @@ { "requiredOneOf": [ - "password" + "password", + "username" ], "attributes": { "text": { @@ -67,7 +68,7 @@ ] } }, - "version": 2, + "version": 3, "description": "Credential describes one or more credential(s) including password(s), api key(s) or decryption key(s).", "meta-category": "misc", "uuid": "a27e98c9-9b0e-414c-8076-d201e039ca09",