fix: add hostname to ip-port template and make attributes multiple

pull/93/head
Alexandre Dulaunoy 2018-04-10 14:46:36 +02:00
parent bd89d1cd01
commit c8e9155a3e
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 20 additions and 5 deletions

View File

@ -3,6 +3,7 @@
"dst-port", "dst-port",
"src-port", "src-port",
"domain", "domain",
"hostname",
"ip" "ip"
], ],
"attributes": { "attributes": {
@ -40,7 +41,9 @@
"External analysis" "External analysis"
], ],
"ui-priority": 1, "ui-priority": 1,
"misp-attribute": "port" "misp-attribute": "port",
"disable_correlation": true,
"multiple": true
}, },
"domain": { "domain": {
"description": "Domain", "description": "Domain",
@ -49,7 +52,18 @@
"External analysis" "External analysis"
], ],
"ui-priority": 1, "ui-priority": 1,
"misp-attribute": "domain" "misp-attribute": "domain",
"multiple": true
},
"hostname": {
"description": "Hostname",
"categories": [
"Network activity",
"External analysis"
],
"ui-priority": 1,
"misp-attribute": "hostname",
"multiple": true
}, },
"ip": { "ip": {
"description": "IP Address", "description": "IP Address",
@ -58,11 +72,12 @@
"External analysis" "External analysis"
], ],
"ui-priority": 1, "ui-priority": 1,
"misp-attribute": "ip-dst" "misp-attribute": "ip-dst",
"multiple": true
} }
}, },
"version": 6, "version": 7,
"description": "An IP address (or domain) and a port seen as a tuple (or as a triple) in a specific time frame.", "description": "An IP address (or domain or hostname) and a port seen as a tuple (or as a triple) in a specific time frame.",
"meta-category": "network", "meta-category": "network",
"uuid": "9f8cea74-16fe-4968-a2b4-026676949ac6", "uuid": "9f8cea74-16fe-4968-a2b4-026676949ac6",
"name": "ip-port" "name": "ip-port"