Merge pull request #238 from pettai/intelmq_event

More explicit misp-attribute types
pull/240/head
Alexandre Dulaunoy 2020-03-06 15:24:49 +01:00 committed by GitHub
commit b457df2a36
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 8 deletions

View File

@ -52,7 +52,7 @@
}, },
"destination.fqdn": { "destination.fqdn": {
"description": "A DNS name related to the host from which the connection originated. DNS allows even binary data in DNS, so we have to allow everything. A final point is stripped, string is converted to lower case characters.", "description": "A DNS name related to the host from which the connection originated. DNS allows even binary data in DNS, so we have to allow everything. A final point is stripped, string is converted to lower case characters.",
"misp-attribute": "text", "misp-attribute": "domain",
"ui-priority": 1 "ui-priority": 1
}, },
"destination.geolocation.cc": { "destination.geolocation.cc": {
@ -97,7 +97,7 @@
}, },
"destination.local_hostname": { "destination.local_hostname": {
"description": "Some sources report a internal hostname within a NAT related to the name configured for a compromized system", "description": "Some sources report a internal hostname within a NAT related to the name configured for a compromized system",
"misp-attribute": "text", "misp-attribute": "hostname",
"ui-priority": 1 "ui-priority": 1
}, },
"destination.local_ip": { "destination.local_ip": {
@ -197,17 +197,17 @@
}, },
"malware.hash.md5": { "malware.hash.md5": {
"description": "A string depicting an MD5 checksum for a file, be it a malware sample for example.", "description": "A string depicting an MD5 checksum for a file, be it a malware sample for example.",
"misp-attribute": "text", "misp-attribute": "md5",
"ui-priority": 1 "ui-priority": 1
}, },
"malware.hash.sha1": { "malware.hash.sha1": {
"description": "A string depicting a SHA1 checksum for a file, be it a malware sample for example.", "description": "A string depicting a SHA1 checksum for a file, be it a malware sample for example.",
"misp-attribute": "text", "misp-attribute": "sha1",
"ui-priority": 1 "ui-priority": 1
}, },
"malware.hash.sha256": { "malware.hash.sha256": {
"description": "A string depicting a SHA256 checksum for a file, be it a malware sample for example.", "description": "A string depicting a SHA256 checksum for a file, be it a malware sample for example.",
"misp-attribute": "text", "misp-attribute": "sha256",
"ui-priority": 1 "ui-priority": 1
}, },
"malware.name": { "malware.name": {
@ -292,7 +292,7 @@
}, },
"source.fqdn": { "source.fqdn": {
"description": "A DNS name related to the host from which the connection originated. DNS allows even binary data in DNS, so we have to allow everything. A final point is stripped, string is converted to lower case characters.", "description": "A DNS name related to the host from which the connection originated. DNS allows even binary data in DNS, so we have to allow everything. A final point is stripped, string is converted to lower case characters.",
"misp-attribute": "text", "misp-attribute": "domain",
"ui-priority": 1 "ui-priority": 1
}, },
"source.geolocation.cc": { "source.geolocation.cc": {
@ -347,7 +347,7 @@
}, },
"source.local_hostname": { "source.local_hostname": {
"description": "Some sources report a internal hostname within a NAT related to the name configured for a compromised system", "description": "Some sources report a internal hostname within a NAT related to the name configured for a compromised system",
"misp-attribute": "text", "misp-attribute": "hostname",
"ui-priority": 1 "ui-priority": 1
}, },
"source.local_ip": { "source.local_ip": {
@ -415,5 +415,5 @@
"meta-category": "network", "meta-category": "network",
"name": "intelmq_event", "name": "intelmq_event",
"uuid": "491ac7d2-25a1-4078-8246-b04a132d003d", "uuid": "491ac7d2-25a1-4078-8246-b04a132d003d",
"version": 3 "version": 4
} }