From d2c9ae007a970491c9c611d496707ccea9d019ba Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thirion=20Aur=C3=A9lien?= <Terrtia@users.noreply.github.com>
Date: Tue, 12 Jun 2018 11:47:44 +0200
Subject: [PATCH] modify ail-leak object for the tagging system

---
 objects/ail-leak/definition.json | 20 ++++----------------
 1 file changed, 4 insertions(+), 16 deletions(-)

diff --git a/objects/ail-leak/definition.json b/objects/ail-leak/definition.json
index 1243073..93f9073 100644
--- a/objects/ail-leak/definition.json
+++ b/objects/ail-leak/definition.json
@@ -3,10 +3,11 @@
     "text",
     "first-seen",
     "last-seen",
-    "origin"
+    "origin",
+    "raw-data"
   ],
   "required": [
-    "type"
+    "sensor"
   ],
   "attributes": {
     "sensor": {
@@ -42,19 +43,6 @@
       "ui-priority": 0,
       "misp-attribute": "datetime"
     },
-    "type": {
-      "sane_default": [
-        "Credential",
-        "CreditCards",
-        "Mail",
-        "Onion",
-        "Phone",
-        "Keys"
-      ],
-      "description": "Type of information leak as discovered and classified by an AIL module.",
-      "ui-priority": 0,
-      "misp-attribute": "text"
-    },
     "last-seen": {
       "description": "When the leak has been accessible or seen for the last time.",
       "disable_correlation": true,
@@ -74,7 +62,7 @@
       "misp-attribute": "attachment"
     }
   },
-  "version": 7,
+  "version": 8,
   "description": "An information leak as defined by the AIL Analysis Information Leak framework.",
   "meta-category": "misc",
   "uuid": "dc6a8fa2-0a43-4a0c-a5aa-b1a5336ca80e",