From a93a2851320f0df5cabd2f1309d50b24ec7f41c0 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Thu, 1 Mar 2018 21:08:16 +0100
Subject: [PATCH] fix: Cowrie object - SSH attributes added

---
 objects/cowrie/definition.json | 34 +++++++++++++++++++++++++++++++++-
 1 file changed, 33 insertions(+), 1 deletion(-)

diff --git a/objects/cowrie/definition.json b/objects/cowrie/definition.json
index 815712a..2016b7b 100644
--- a/objects/cowrie/definition.json
+++ b/objects/cowrie/definition.json
@@ -83,9 +83,41 @@
       "ui-priority": 1,
       "misp-attribute": "text",
       "disable_correlation": true
+    },
+    "input": {
+      "description": "Input of the session",
+      "ui-priority": 1,
+      "misp-attribute": "text"
+    },
+    "macCS": {
+      "description": "SSH MAC supported in the sesssion",
+      "multiple": true,
+      "disable_correlation": true,
+      "ui-priority": 1,
+      "misp-attribute": "text"
+    },
+    "keyAlgs": {
+      "description": "SSH public-key algorithm supported in the session",
+      "multiple": true,
+      "disable_correlation": true,
+      "ui-priority": 1,
+      "misp-attribute": "text"
+    },
+    "encCS": {
+      "description": "SSH symmetric encryption algorithm supported in the session",
+      "multiple": true,
+      "disable_correlation": true,
+      "ui-priority": 1,
+      "misp-attribute": "text"
+    },
+    "compCS": {
+      "description": "SSH compression algorithm supported in the session",
+      "multiple": true,
+      "ui-priority": 1,
+      "misp-attribute": "text"
     }
   },
-  "version": 1,
+  "version": 2,
   "description": "Cowrie honeypot object template",
   "meta-category": "network",
   "uuid": "ae085d32-6534-4d52-b3eb-063fccb753e7",