MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

whois object added + requireOneOf added

pull/2/head
Alexandre Dulaunoy 2016-02-09 16:10:13 +01:00
parent fc5ecd7c69
commit b96a895f2b
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@ -47,6 +47,7 @@ A MISP object is described in a simple JSON file containing the following elemen
* **description** is a summary of the object description. * **description** is a summary of the object description.
* **version** is the version number as a decimal value. * **version** is the version number as a decimal value.
* **required** is an array containing the minimal required attributes to describe the object. * **required** is an array containing the minimal required attributes to describe the object.
* **requiredOneOf** is an array containing the attributes where at least one need to be present to describe the object.
* **attributes** contains another JSON object listing all the attributes composing the object. * **attributes** contains another JSON object listing all the attributes composing the object.
Each attribute must contain a reference **misp-attribute** to reference an existing attribute definition in MISP. Each attribute must contain a reference **misp-attribute** to reference an existing attribute definition in MISP.
@ -57,6 +58,7 @@ allowing advanced users to show all the attributes depending of their configurat
## Existing MISP objects ## Existing MISP objects
* [objects/domain-ip](objects/domain-ip/definition.json) - A domain and IP address seen as a tuple in a specific time frame. * [objects/domain-ip](objects/domain-ip/definition.json) - A domain and IP address seen as a tuple in a specific time frame.
* [objects/whois](objects/whois/definition.json) - Whois records information for a domain name.
## License ## License