MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge branch 'chrisr3d_patch' of github.com:MISP/misp-objects

pull/408/head
Christian Studer 2023-11-09 12:24:52 +01:00
parent a1d2ca28fb 8fb566fc60
commit ca371d4567
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
objects/intrusion-set/definition.json
View File

@ -11,6 +11,11 @@
"misp-attribute": "text", "misp-attribute": "text",
"ui-priority": 1 "ui-priority": 1
}, },
"first_seen": {
"description": "The time that the intrusion set was first seen.",
"misp-attribute": "datetime",
"ui-priority": 0
},
"goals": { "goals": {
"description": "The high-level goals of this Intrusion Set, namely, what are they trying to do. For example, they may be motivated by personal gain, but their goal is to steal credit card numbers. To do this, they may execute specific Campaigns that have detailed objectives like compromising point of sale systems at a large retailer. Another example: to gain information about latest merger and IPO information from ACME Bank.", "description": "The high-level goals of this Intrusion Set, namely, what are they trying to do. For example, they may be motivated by personal gain, but their goal is to steal credit card numbers. To do this, they may execute specific Campaigns that have detailed objectives like compromising point of sale systems at a large retailer. Another example: to gain information about latest merger and IPO information from ACME Bank.",
"disable_correlation": true, "disable_correlation": true,
@ -18,6 +23,11 @@
"multiple": true, "multiple": true,
"ui-priority": 1 "ui-priority": 1
}, },
"last_seen": {
"description": "The time that the intrusion set was last seen.",
"misp-attribute": "datetime",
"ui-priority": 0
},
"name": { "name": {
"description": "A name used to identify this Intrusion Set.", "description": "A name used to identify this Intrusion Set.",
"misp-attribute": "text", "misp-attribute": "text",