diff --git a/README.md b/README.md index 3220f95..ab022d8 100644 --- a/README.md +++ b/README.md @@ -396,6 +396,7 @@ for a specific attribute. An optional **to_ids** boolean field to disable the ID - [objects/sigmf-recording](https://github.com/MISP/misp-objects/blob/main/objects/sigmf-recording/definition.json) - An object representing a single IQ/RF sample in the Signal Metadata Format Specification (SigMF). - [objects/social-media-group](https://github.com/MISP/misp-objects/blob/main/objects/social-media-group/definition.json) - Social media group object template describing a public or private group or channel. - [objects/software](https://github.com/MISP/misp-objects/blob/main/objects/software/definition.json) - The Software object represents high-level properties associated with software, including software products. STIX 2.1 - 6.14. +- [objects/spambee-report](https://github.com/MISP/misp-objects/main/objects/spambee-report/definition.json) - A Spambee analysis report. - [objects/spearphishing-attachment](https://github.com/MISP/misp-objects/blob/main/objects/spearphishing-attachment/definition.json) - Spearphishing Attachment. - [objects/spearphishing-link](https://github.com/MISP/misp-objects/blob/main/objects/spearphishing-link/definition.json) - Spearphishing Link. - [objects/splunk](https://github.com/MISP/misp-objects/blob/main/objects/splunk/definition.json) - Splunk / Splunk ES object. diff --git a/objects/spambee-report/definition.json b/objects/spambee-report/definition.json new file mode 100644 index 0000000..b4bc119 --- /dev/null +++ b/objects/spambee-report/definition.json @@ -0,0 +1,54 @@ +{ + "attributes": { + "feedback-requested": { + "description": "User has requested feedback", + "disable-correlation": true, + "misp-attribute": "boolean", + "ui-priority": 0 + }, + "feedback-sent": { + "description": "Feedback has been sent to user", + "disable-correlation": true, + "misp-attribute": "boolean", + "ui-priority": 0 + }, + "feedback-time": { + "description": "Timestamp of the feedback", + "disable-correlation": true, + "misp-attribute": "datetime", + "ui-priority": 0 + }, + "privacy": { + "description": "User has requested privacy", + "disable-correlation": true, + "misp-attribute": "boolean", + "ui-priority": 0 + }, + "report-status": { + "categories": [ + "External analysis" + ], + "description": "Result of the Spambee analysis for the submitted email", + "disable-correlation": true, + "misp-attribute": "text", + "ui-priority": 0 + }, + "report-uid": { + "categories": [ + "Internal reference" + ], + "description": "Internal reference to the Spambee report", + "disable-correlation": true, + "misp-attribute": "text", + "ui-priority": 0 + } + }, + "description": "A Spambee analysis report", + "meta-category": "network", + "name": "spambee-report", + "requiredOneOf": [ + "report-uid" + ], + "uuid": "305d6e6c-bb4d-4b9a-abf5-9f34d1322352", + "version": 2 +} \ No newline at end of file