From 8fb566fc609664ef6839ab00f1ec7b219366fd6f Mon Sep 17 00:00:00 2001 From: Christian Studer Date: Thu, 9 Nov 2023 12:10:52 +0100 Subject: [PATCH] add: [intrusion-set] Added `first_seen` & `last_seen` attributes --- objects/intrusion-set/definition.json | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/objects/intrusion-set/definition.json b/objects/intrusion-set/definition.json index 3e94273..6abe1d2 100644 --- a/objects/intrusion-set/definition.json +++ b/objects/intrusion-set/definition.json @@ -11,6 +11,11 @@ "misp-attribute": "text", "ui-priority": 1 }, + "first_seen": { + "description": "The time that the intrusion set was first seen.", + "misp-attribute": "datetime", + "ui-priority": 0 + }, "goals": { "description": "The high-level goals of this Intrusion Set, namely, what are they trying to do. For example, they may be motivated by personal gain, but their goal is to steal credit card numbers. To do this, they may execute specific Campaigns that have detailed objectives like compromising point of sale systems at a large retailer. Another example: to gain information about latest merger and IPO information from ACME Bank.", "disable_correlation": true, @@ -18,6 +23,11 @@ "multiple": true, "ui-priority": 1 }, + "last_seen": { + "description": "The time that the intrusion set was last seen.", + "misp-attribute": "datetime", + "ui-priority": 0 + }, "name": { "description": "A name used to identify this Intrusion Set.", "misp-attribute": "text",