mirror of https://github.com/MISP/misp-objects
Added a is-malicious attribute for abuseipdb and added a google-safe-browsing object for the google-safe-browsing expansion module
parent
1374b0c7f0
commit
c7bade5c8b
|
@ -1,5 +1,10 @@
|
||||||
{
|
{
|
||||||
"attributes": {
|
"attributes": {
|
||||||
|
"is-malicious": {
|
||||||
|
"description": "If the IP is malicious based on the abuse-confidence-score and threshold",
|
||||||
|
"misp-attribute": "boolean",
|
||||||
|
"ui-priority": 0
|
||||||
|
},
|
||||||
"abuse-confidence-score": {
|
"abuse-confidence-score": {
|
||||||
"description": "Rating (0-100) of how confident AbuseIPDB is that an IP address is entirely malicious",
|
"description": "Rating (0-100) of how confident AbuseIPDB is that an IP address is entirely malicious",
|
||||||
"misp-attribute": "counter",
|
"misp-attribute": "counter",
|
||||||
|
|
|
@ -0,0 +1,24 @@
|
||||||
|
{
|
||||||
|
"attributes": {
|
||||||
|
"malicious": {
|
||||||
|
"description": "If the URL comes back as malicious",
|
||||||
|
"misp-attribute": "boolean",
|
||||||
|
"ui-priority": 0
|
||||||
|
},
|
||||||
|
"platforms": {
|
||||||
|
"description": "The platform identified (windows, linux, etc...)",
|
||||||
|
"misp-attribute": "text",
|
||||||
|
"ui-priority": 0
|
||||||
|
},
|
||||||
|
"threats": {
|
||||||
|
"description": "The threat type related to that URL (malware, social engineering, etc...)",
|
||||||
|
"misp-attribute": "text",
|
||||||
|
"ui-priority": 0
|
||||||
|
}
|
||||||
|
},
|
||||||
|
"description": "Google Safe checks a URL against Google's constantly updated list of unsafe web resources.",
|
||||||
|
"meta-category": "network",
|
||||||
|
"name": "google-safe-browsing",
|
||||||
|
"uuid": "1f8af312-dfbb-4572-b894-dabe7c8798d8",
|
||||||
|
"version": 1
|
||||||
|
}
|
Loading…
Reference in New Issue