From aa00bd384c001459e8242e6a895b86a2b895a63f Mon Sep 17 00:00:00 2001
From: Alexandre De Oliveira <mail@alexandredeoliveira.fr>
Date: Tue, 11 Jan 2022 09:43:03 +0100
Subject: [PATCH] Add MAP application context list, without version

---
 objects/ss7-attack/definition.json | 63 +++++++++++++++++++++++++++++-
 1 file changed, 62 insertions(+), 1 deletion(-)

diff --git a/objects/ss7-attack/definition.json b/objects/ss7-attack/definition.json
index fc9be03..95756d4 100644
--- a/objects/ss7-attack/definition.json
+++ b/objects/ss7-attack/definition.json
@@ -46,6 +46,67 @@
       "description": "MAP application context in OID format.",
       "disable_correlation": true,
       "misp-attribute": "text",
+       "sane_default": [
+        "4.0.0.1.0.1. - networkLocUp ",
+        "4.0.0.1.0.2. - locationCancel ",
+        "4.0.0.1.0.3. - roamingNbEnquiry ",
+        "4.0.0.1.0.22. - subscriberDataModificationNotification ",
+        "4.0.0.1.0.6. - callControlTransfer ",
+        "4.0.0.1.0.16. - subscriberDataMngt ",
+        "4.0.0.1.0.32. - gprsLocationUpdate ",
+        "4.0.0.1.0.46. - vcsgLocationUpdate ",
+        "4.0.0.1.0.1. - networkLocUp_v1 ",
+        "4.0.0.1.0.14. - infoRetrieval_v1 ",
+        "4.0.0.1.0.15. - interVlrInfoRetrieval_v1 ",
+        "4.0.0.1.0.18. - networkFunctionalSs ",
+        "4.0.0.1.0.39. - authenticationFailureReport_v3 ",
+        "4.0.0.1.0.18. - networkFunctionalSs_v1 ",
+        "4.0.0.1.0.44. - resourceMngt ",
+        "4.0.0.1.0.41. - shortMsgMT_VGCS_Relay ",
+        "4.0.0.1.0.5. - locInfoRetrieval ",
+        "4.0.0.1.0.32. - gprsLocationUpdate_v3 ",
+        "4.0.0.1.0.33. - gprsLocationInfoRetrieval_v3_v4 ",
+        "4.0.0.1.0.34. - failureReport_v3 ",
+        "4.0.0.1.0.35. - gprsNotify ",
+        "4.0.0.1.0.11. - handoverControl_v1 ",
+        "4.0.0.1.0.11. - handoverControl ",
+        "4.0.0.1.0.12. - sIWFSAllocation ",
+        "4.0.0.1.0.47. - vcsgLocationCancel ",
+        "4.0.0.1.0.10. - reset ",
+        "4.0.0.1.0.31. - groupCallControl ",
+        "4.0.0.1.0.13. - equipmentMngt ",
+        "4.0.0.1.0.25. - shortMsgMT_Relay ",
+        "4.0.0.1.0.20. - shortMsgGateway ",
+        "4.0.0.1.0.21. - shortMsgMO_Relay ",
+        "4.0.0.1.0.24. - mwdMngt_v1 ",
+        "4.0.0.1.0.23. - shortMsgAlert_v1 ",
+        "4.0.0.1.0.17. - tracing ",
+        "4.0.0.1.0.18. - networkFunctionalSs_V1 ",
+        "4.0.0.1.0.15. - interVlrInfoRetrievalV2_V3 ",
+        "4.0.0.1.0.14. - infoRetrieval_v2_v3 ",
+        "4.0.0.1.0.1. - networkLocUp_v2 ",
+        "4.0.0.1.0.26. - imsiRetrieval_v2 ",
+        "4.0.0.1.0.19. - networkUnstructuredSsv2 ",
+        "4.0.0.1.0.19. - networkUnstructuredSs ",
+        "4.0.0.1.0.43. - anyTimeInfoHandling ",
+        "4.0.0.1.0.23. - shortMsgAlert_v2 ",
+        "4.0.0.1.0.24. - mwdMngt_v2_v3 ",
+        "4.0.0.1.0.4. - istAlerting_v2_v3 ",
+        "4.0.0.1.0.27. - msPurging_v3 ",
+        "4.0.0.1.0.11. - handoverControl_v2_v3 ",
+        "4.0.0.1.0.28. - subscriberInfoEnquiry ",
+        "4.0.0.1.0.29. - anyTimeEnquiryv3 ",
+        "4.0.0.1.0.36. - ss_InvocationNotification ",
+        "4.0.0.1.0.7. - reporting ",
+        "4.0.0.1.0.8. - callCompletion ",
+        "4.0.0.1.0.38. - locationSvcEnquiryv3 ",
+        "4.0.0.1.0.45. - groupCallInfoRetrieval ",
+        "4.0.0.1.0.37. - locationSvcGateway_v3 ",
+        "4.0.0.1.0.38. - locationSvcEnquiry ",
+        "4.0.0.1.0.4. - istAlerting_v3 ",
+        "4.0.0.1.0.9. - ServiceTermination ",
+        "4.0.0.1.0.42. - mm_EventReporting "
+      ],
       "ui-priority": 0
     },
     "MapGmlc": {
@@ -198,4 +259,4 @@
   ],
   "uuid": "f3493d8b-a7ab-48d0-a775-046c4d64d782",
   "version": 3
-}
\ No newline at end of file
+}