mirror of https://github.com/MISP/misp-objects
add: Cowrie honeypot object template
parent
26a516bc7d
commit
bdaee9e1c7
|
@ -0,0 +1,81 @@
|
|||
{
|
||||
"requiredOneOf": [
|
||||
"session"
|
||||
],
|
||||
"attributes": {
|
||||
"eventid": {
|
||||
"description": "Eventid of the session in the cowrie honeypot",
|
||||
"disable_correlation": true,
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text"
|
||||
},
|
||||
"system": {
|
||||
"description": "System origin in cowrie honeypot",
|
||||
"disable_correlation": true,
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text"
|
||||
},
|
||||
"username": {
|
||||
"description": "Username related to the password(s)",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text"
|
||||
},
|
||||
"passsword": {
|
||||
"description": "Password",
|
||||
"multiple": true,
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text"
|
||||
},
|
||||
"session": {
|
||||
"description": "Session id",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text"
|
||||
},
|
||||
"timestamp": {
|
||||
"description": "When the event happened",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "datetime",
|
||||
"disable_correlation": true
|
||||
},
|
||||
"message": {
|
||||
"description": "Message of the cowrie honeypot",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text",
|
||||
"disable_correlation": true
|
||||
},
|
||||
"protocol": {
|
||||
"description": "Protocol used in the cowrie honeypot",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text",
|
||||
"disable_correlation": true
|
||||
},
|
||||
"sensor": {
|
||||
"description": "Cowrie sensor name",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text",
|
||||
"disable_correlation": true
|
||||
},
|
||||
"src_ip": {
|
||||
"description": "Source IP address of the session",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "ip-src"
|
||||
},
|
||||
"dst_ip": {
|
||||
"description": "Destionation IP address of the session",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "ip-dst",
|
||||
"disable_correlation": true
|
||||
},
|
||||
"isError": {
|
||||
"description": "isError",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text",
|
||||
"disable_correlation": true
|
||||
}
|
||||
},
|
||||
"version": 1,
|
||||
"description": "Cowrie honeypot object template",
|
||||
"meta-category": "network",
|
||||
"uuid": "ae085d32-6534-4d52-b3eb-063fccb753e7",
|
||||
"name": "cowrie"
|
||||
}
|
Loading…
Reference in New Issue