mirror of https://github.com/MISP/misp-objects
Feedback from David added (two new relationships - triggers and detected_as)
parent
50fe0c2993
commit
d75325fd6d
|
@ -1,193 +1,207 @@
|
||||||
{
|
{
|
||||||
"version": 8,
|
"name": "relationships",
|
||||||
|
"uuid": "b002c0d6-320f-450d-82c4-b3aa15bbbd6c",
|
||||||
|
"description": "Default type of relationships in MISP objects.",
|
||||||
"values": [
|
"values": [
|
||||||
{
|
{
|
||||||
"name": "derived-from",
|
"format": [
|
||||||
|
"misp",
|
||||||
|
"stix-2.0"
|
||||||
|
],
|
||||||
"description": "The information in the target object is based on information from the source object.",
|
"description": "The information in the target object is based on information from the source object.",
|
||||||
|
"name": "derived-from"
|
||||||
|
},
|
||||||
|
{
|
||||||
"format": [
|
"format": [
|
||||||
"misp",
|
"misp",
|
||||||
"stix-2.0"
|
"stix-2.0"
|
||||||
]
|
],
|
||||||
},
|
|
||||||
{
|
|
||||||
"name": "duplicate-of",
|
|
||||||
"description": "The referenced source and target objects are semantically duplicates of each other.",
|
"description": "The referenced source and target objects are semantically duplicates of each other.",
|
||||||
|
"name": "duplicate-of"
|
||||||
|
},
|
||||||
|
{
|
||||||
"format": [
|
"format": [
|
||||||
"misp",
|
"misp",
|
||||||
"stix-2.0"
|
"stix-2.0"
|
||||||
]
|
],
|
||||||
},
|
|
||||||
{
|
|
||||||
"name": "related-to",
|
|
||||||
"description": "The referenced source is related to the target object.",
|
"description": "The referenced source is related to the target object.",
|
||||||
|
"name": "related-to"
|
||||||
|
},
|
||||||
|
{
|
||||||
"format": [
|
"format": [
|
||||||
"misp",
|
"misp",
|
||||||
"stix-2.0"
|
"stix-2.0"
|
||||||
]
|
],
|
||||||
},
|
|
||||||
{
|
|
||||||
"name": "attributed-to",
|
|
||||||
"description": "This referenced source is attributed to the target object.",
|
"description": "This referenced source is attributed to the target object.",
|
||||||
|
"name": "attributed-to"
|
||||||
|
},
|
||||||
|
{
|
||||||
"format": [
|
"format": [
|
||||||
"misp",
|
"misp",
|
||||||
"stix-2.0"
|
"stix-2.0"
|
||||||
]
|
],
|
||||||
},
|
|
||||||
{
|
|
||||||
"name": "targets",
|
|
||||||
"description": "This relationship describes that the source object targets the target object.",
|
"description": "This relationship describes that the source object targets the target object.",
|
||||||
|
"name": "targets"
|
||||||
|
},
|
||||||
|
{
|
||||||
"format": [
|
"format": [
|
||||||
"misp",
|
"misp",
|
||||||
"stix-2.0"
|
"stix-2.0"
|
||||||
]
|
],
|
||||||
},
|
|
||||||
{
|
|
||||||
"name": "uses",
|
|
||||||
"description": "This relationship describes the use by the source object of the target object.",
|
"description": "This relationship describes the use by the source object of the target object.",
|
||||||
|
"name": "uses"
|
||||||
|
},
|
||||||
|
{
|
||||||
"format": [
|
"format": [
|
||||||
"misp",
|
"misp",
|
||||||
"stix-2.0"
|
"stix-2.0"
|
||||||
]
|
],
|
||||||
},
|
|
||||||
{
|
|
||||||
"name": "indicates",
|
|
||||||
"description": "This relationships describes that the source object indicates the target object.",
|
"description": "This relationships describes that the source object indicates the target object.",
|
||||||
|
"name": "indicates"
|
||||||
|
},
|
||||||
|
{
|
||||||
"format": [
|
"format": [
|
||||||
"misp",
|
"misp",
|
||||||
"stix-2.0"
|
"stix-2.0"
|
||||||
]
|
],
|
||||||
},
|
|
||||||
{
|
|
||||||
"name": "mitigates",
|
|
||||||
"description": "This relationship describes a source object which mitigates the target object.",
|
"description": "This relationship describes a source object which mitigates the target object.",
|
||||||
|
"name": "mitigates"
|
||||||
|
},
|
||||||
|
{
|
||||||
"format": [
|
"format": [
|
||||||
"misp",
|
"misp",
|
||||||
"stix-2.0"
|
"stix-2.0"
|
||||||
]
|
],
|
||||||
},
|
|
||||||
{
|
|
||||||
"name": "variant-of",
|
|
||||||
"description": "This relationship describes a source object which is a variant of the target object",
|
"description": "This relationship describes a source object which is a variant of the target object",
|
||||||
|
"name": "variant-of"
|
||||||
|
},
|
||||||
|
{
|
||||||
"format": [
|
"format": [
|
||||||
"misp",
|
"misp",
|
||||||
"stix-2.0"
|
"stix-2.0"
|
||||||
]
|
],
|
||||||
},
|
|
||||||
{
|
|
||||||
"name": "impersonates",
|
|
||||||
"description": "This relationship describe a source object which impersonates the target object",
|
"description": "This relationship describe a source object which impersonates the target object",
|
||||||
"format": [
|
"name": "impersonates"
|
||||||
"misp",
|
|
||||||
"stix-2.0"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"name": "authored-by",
|
"format": [
|
||||||
|
"misp"
|
||||||
|
],
|
||||||
"description": "This relationship describes the author of a specific object.",
|
"description": "This relationship describes the author of a specific object.",
|
||||||
"format": [
|
"name": "authored-by"
|
||||||
"misp"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"name": "located",
|
"format": [
|
||||||
|
"misp"
|
||||||
|
],
|
||||||
"description": "This relationship describes the location (of any type) of a specific object.",
|
"description": "This relationship describes the location (of any type) of a specific object.",
|
||||||
"format": [
|
"name": "located"
|
||||||
"misp"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"name": "included-in",
|
"format": [
|
||||||
|
"misp"
|
||||||
|
],
|
||||||
"description": "This relationship describes an object included in another object.",
|
"description": "This relationship describes an object included in another object.",
|
||||||
"format": [
|
"name": "included-in"
|
||||||
"misp"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"name": "analysed-with",
|
"format": [
|
||||||
|
"misp"
|
||||||
|
],
|
||||||
"description": "This relationship describes an object analysed by another object.",
|
"description": "This relationship describes an object analysed by another object.",
|
||||||
"format": [
|
"name": "analysed-with"
|
||||||
"misp"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"name": "claimed-by",
|
"format": [
|
||||||
|
"misp"
|
||||||
|
],
|
||||||
"description": "This relationship describes an object claimed by another object.",
|
"description": "This relationship describes an object claimed by another object.",
|
||||||
"format": [
|
"name": "claimed-by"
|
||||||
"misp"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"name": "communicates-with",
|
"format": [
|
||||||
|
"misp"
|
||||||
|
],
|
||||||
"description": "This relationship describes an object communicating with another object.",
|
"description": "This relationship describes an object communicating with another object.",
|
||||||
"format": [
|
"name": "communicates-with"
|
||||||
"misp"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"name": "dropped-by",
|
"format": [
|
||||||
|
"misp"
|
||||||
|
],
|
||||||
"description": "This relationship describes an object dropped by another object.",
|
"description": "This relationship describes an object dropped by another object.",
|
||||||
"format": [
|
"name": "dropped-by"
|
||||||
"misp"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"name": "executed-by",
|
"format": [
|
||||||
|
"misp"
|
||||||
|
],
|
||||||
"description": "This relationship describes an object executed by another object.",
|
"description": "This relationship describes an object executed by another object.",
|
||||||
"format": [
|
"name": "executed-by"
|
||||||
"misp"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"name": "affects",
|
"format": [
|
||||||
|
"misp"
|
||||||
|
],
|
||||||
"description": "This relationship describes an object affected by another object.",
|
"description": "This relationship describes an object affected by another object.",
|
||||||
"format": [
|
"name": "affects"
|
||||||
"misp"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"name": "beacons_to",
|
"format": [
|
||||||
|
"misp"
|
||||||
|
],
|
||||||
"description": "This relationship describes an object beaconing to another object.",
|
"description": "This relationship describes an object beaconing to another object.",
|
||||||
"format": [
|
"name": "beacons_to"
|
||||||
"misp"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"name": "abuses",
|
"format": [
|
||||||
|
"misp"
|
||||||
|
],
|
||||||
"description": "This relationship describes an object which abuses another object.",
|
"description": "This relationship describes an object which abuses another object.",
|
||||||
"format": [
|
"name": "abuses"
|
||||||
"misp"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"name": "exfiltrates_to",
|
"format": [
|
||||||
|
"misp"
|
||||||
|
],
|
||||||
"description": "This relationship describes an object exfiltrating to another object.",
|
"description": "This relationship describes an object exfiltrating to another object.",
|
||||||
"format": [
|
"name": "exfiltrates_to"
|
||||||
"misp"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"name": "identifies",
|
"format": [
|
||||||
|
"misp"
|
||||||
|
],
|
||||||
"description": "This relationship describes an object which identifies another object.",
|
"description": "This relationship describes an object which identifies another object.",
|
||||||
"format": [
|
"name": "identifies"
|
||||||
"misp"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"name": "intercepts",
|
"format": [
|
||||||
|
"misp"
|
||||||
|
],
|
||||||
"description": "This relationship describes an object which intercepts another object.",
|
"description": "This relationship describes an object which intercepts another object.",
|
||||||
"format": [
|
"name": "intercepts"
|
||||||
"misp"
|
|
||||||
]
|
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
"name": "calls",
|
|
||||||
"description": "This relationship describes an object which calls another objects.",
|
|
||||||
"format": [
|
"format": [
|
||||||
"misp"
|
"misp"
|
||||||
]
|
],
|
||||||
|
"description": "This relationship describes an object which calls another objects.",
|
||||||
|
"name": "calls"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"format": [
|
||||||
|
"misp"
|
||||||
|
],
|
||||||
|
"description": "This relationship describes an object which is detected as another object.",
|
||||||
|
"name": "detected_as"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"format": [
|
||||||
|
"misp"
|
||||||
|
],
|
||||||
|
"description": "This relationship describes an object which triggers another object.",
|
||||||
|
"name": "triggers"
|
||||||
}
|
}
|
||||||
],
|
],
|
||||||
"description": "Default type of relationships in MISP objects.",
|
"version": 9
|
||||||
"uuid": "b002c0d6-320f-450d-82c4-b3aa15bbbd6c",
|
|
||||||
"name": "relationships"
|
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in New Issue