From 69467c133fb267535507e02264ed90feeb3586a7 Mon Sep 17 00:00:00 2001 From: VVX7 Date: Thu, 28 May 2020 16:32:20 -0400 Subject: [PATCH 1/2] new: [dev] add facebook-account --- objects/facebook-account/definition.json | 54 ++++++++++++++++++++++++ 1 file changed, 54 insertions(+) create mode 100644 objects/facebook-account/definition.json diff --git a/objects/facebook-account/definition.json b/objects/facebook-account/definition.json new file mode 100644 index 0000000..b7e201e --- /dev/null +++ b/objects/facebook-account/definition.json @@ -0,0 +1,54 @@ +{ + "attributes": { + "account-id": { + "description": "Account id.", + "misp-attribute": "text", + "ui-priority": 1 + }, + "account-name": { + "description": "Account name.", + "misp-attribute": "text", + "ui-priority": 1 + }, + "archive": { + "description": "Archive of the account (Internet Archive, Archive.is, etc).", + "disable_correlation": true, + "misp-attribute": "link", + "multiple": true, + "ui-priority": 1 + }, + "attachment": { + "description": "A screen capture or exported list of contacts etc.", + "misp-attribute": "attachment", + "multiple": true, + "ui-priority": 1 + }, + "description": { + "description": "A description of the user.", + "misp-attribute": "text", + "ui-priority": 1 + }, + "link": { + "description": "Original link to the page (supposed harmless).", + "misp-attribute": "link", + "ui-priority": 1 + }, + "url": { + "description": "Original URL location of the page (potentially malicious).", + "misp-attribute": "url", + "ui-priority": 1 + } + }, + "description": "Facebook account.", + "meta-category": "misc", + "name": "facebook-account", + "requiredOneOf": [ + "account-name", + "account-id", + "description", + "archive", + "link" + ], + "uuid": "b9862b95-7d78-4938-a2b5-13e45c60f25a", + "version": 1 +} \ No newline at end of file From c6da4c9e66038583aa78b0d799345e7c80f9d77c Mon Sep 17 00:00:00 2001 From: VVX7 Date: Thu, 28 May 2020 16:40:21 -0400 Subject: [PATCH 2/2] chg: [dev] add user avatar --- objects/facebook-account/definition.json | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/objects/facebook-account/definition.json b/objects/facebook-account/definition.json index b7e201e..e7ed211 100644 --- a/objects/facebook-account/definition.json +++ b/objects/facebook-account/definition.json @@ -37,6 +37,12 @@ "description": "Original URL location of the page (potentially malicious).", "misp-attribute": "url", "ui-priority": 1 + }, + "user-avatar": { + "description": "A user profile picture or avatar.", + "misp-attribute": "attachment", + "multiple": true, + "ui-priority": 1 } }, "description": "Facebook account.",