add: Cowrie honeypot object template

pull/85/head
Alexandre Dulaunoy 2018-02-28 17:41:29 +01:00
parent 26a516bc7d
commit bdaee9e1c7
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 81 additions and 0 deletions

View File

@ -0,0 +1,81 @@
{
"requiredOneOf": [
"session"
],
"attributes": {
"eventid": {
"description": "Eventid of the session in the cowrie honeypot",
"disable_correlation": true,
"ui-priority": 1,
"misp-attribute": "text"
},
"system": {
"description": "System origin in cowrie honeypot",
"disable_correlation": true,
"ui-priority": 1,
"misp-attribute": "text"
},
"username": {
"description": "Username related to the password(s)",
"ui-priority": 1,
"misp-attribute": "text"
},
"passsword": {
"description": "Password",
"multiple": true,
"ui-priority": 1,
"misp-attribute": "text"
},
"session": {
"description": "Session id",
"ui-priority": 1,
"misp-attribute": "text"
},
"timestamp": {
"description": "When the event happened",
"ui-priority": 1,
"misp-attribute": "datetime",
"disable_correlation": true
},
"message": {
"description": "Message of the cowrie honeypot",
"ui-priority": 1,
"misp-attribute": "text",
"disable_correlation": true
},
"protocol": {
"description": "Protocol used in the cowrie honeypot",
"ui-priority": 1,
"misp-attribute": "text",
"disable_correlation": true
},
"sensor": {
"description": "Cowrie sensor name",
"ui-priority": 1,
"misp-attribute": "text",
"disable_correlation": true
},
"src_ip": {
"description": "Source IP address of the session",
"ui-priority": 1,
"misp-attribute": "ip-src"
},
"dst_ip": {
"description": "Destionation IP address of the session",
"ui-priority": 1,
"misp-attribute": "ip-dst",
"disable_correlation": true
},
"isError": {
"description": "isError",
"ui-priority": 1,
"misp-attribute": "text",
"disable_correlation": true
}
},
"version": 1,
"description": "Cowrie honeypot object template",
"meta-category": "network",
"uuid": "ae085d32-6534-4d52-b3eb-063fccb753e7",
"name": "cowrie"
}