MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

Re-Do the definition.json, according to the results of the discussion in 

https://github.com/MISP/misp-objects/pull/314

Removing *_ip and *_domain
Keeping bailiwick a domain type
pull/314/head
aaronkaplan 2021-05-03 00:57:14 +02:00
parent bcd133527e
commit b728ed3e29
No known key found for this signature in database
GPG Key ID: 1AED8B672DD4C9B1
1 changed files with 0 additions and 36 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
objects/passive-dns/definition.json
View File

@ -28,24 +28,6 @@
"misp-attribute": "text",
"ui-priority": 1
},
"rdata_ip": {
"categories": [
"Network activity",
"External analysis"
],
"description": "Resource records of the queried resource. Mapped to MISP 'ip' address type. Valid for rrtypes (A, AAAA, A6, ...).",
"misp-attribute": "ip-src",
"ui-priority": 1
},
"rdata_domain": {
"categories": [
"Network activity",
"External analysis"
],
"description": "Resource records of the queried resource. Mapped to MISP 'domain' address type. Valid for rrtypes (CNAME, etc.).",
"misp-attribute": "domain",
"ui-priority": 1
},
"rrname": {
"categories": [
"Network activity",
@ -55,24 +37,6 @@
"misp-attribute": "text",
"ui-priority": 1
},
"rrname_domain": {
"categories": [
"Network activity",
"External analysis"
],
"description": "Resource Record name of the queried resource. Same as the field 'rrname', however already mapped to the MISP 'domain' type so that we can correlate.",
"misp-attribute": "domain",
"ui-priority": 1
},
"rrname_ip": {
"categories": [
"Network activity",
"External analysis"
],
"description": "Resource Record name of the queried resource. Same as the field 'rrname', however already mapped to the MISP 'ip' type so that we can correlate. Note that this is only valid if 'rrtype' is 'PTR'.",
"misp-attribute": "ip-src",
"ui-priority": 1
},
"rrtype": {
"categories": [
"Network activity",