From dac6d57e79988c55591b6e4ed16b3a110fdea05a Mon Sep 17 00:00:00 2001 From: matthijsvp Date: Fri, 20 May 2022 15:50:31 +0200 Subject: [PATCH 1/2] Added some field from feedback --- objects/ransom-negotiation/definition.json | 22 +++++++++++++++++++++- 1 file changed, 21 insertions(+), 1 deletion(-) diff --git a/objects/ransom-negotiation/definition.json b/objects/ransom-negotiation/definition.json index a92925c..6a0cd23 100644 --- a/objects/ransom-negotiation/definition.json +++ b/objects/ransom-negotiation/definition.json @@ -65,6 +65,7 @@ "negotiations_screenshot": { "description": "Screenshot of the negotiations", "disable_correlation": true, + "multiple": true, "misp-attribute": "attachment", "ui-priority": 840 }, @@ -74,6 +75,25 @@ "misp-attribute": "text", "ui-priority": 850 }, + "chatsite": { + "description": "Chatsite where the negotiations take place", + "disable_correlation": true, + "to_ids": false, + "misp-attribute": "url", + "ui-priority": 835 + }, + "chatsite_id_public": { + "description": "Initial chat ID given by actor", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 834 + }, + "chatsite_id_private": { + "description": "Second, private, chat ID given by actor", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 833 + }, "pay_for_deletion": { "description": "Does the target need/want to pay for data deletion", "disable_correlation": true, @@ -129,5 +149,5 @@ "meta-category": "financial", "name": "ransom-negotiation", "uuid": "FB72F951-DE2E-4B54-A570-8FC560A74B06", - "version": 1 + "version": 2 } \ No newline at end of file From f04caaa2c107f8dfdb26b4c17ea9ea4926504346 Mon Sep 17 00:00:00 2001 From: matthijsvp Date: Fri, 20 May 2022 15:53:29 +0200 Subject: [PATCH 2/2] Added fields --- objects/ransom-negotiation/definition.json | 40 +++++++++++----------- 1 file changed, 20 insertions(+), 20 deletions(-) diff --git a/objects/ransom-negotiation/definition.json b/objects/ransom-negotiation/definition.json index 6a0cd23..2d89d3d 100644 --- a/objects/ransom-negotiation/definition.json +++ b/objects/ransom-negotiation/definition.json @@ -12,6 +12,25 @@ "misp-attribute": "float", "ui-priority": 920 }, + "chatsite": { + "description": "Chatsite where the negotiations take place", + "disable_correlation": true, + "misp-attribute": "url", + "to_ids": false, + "ui-priority": 835 + }, + "chatsite_id_private": { + "description": "Second, private, chat ID given by actor", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 833 + }, + "chatsite_id_public": { + "description": "Initial chat ID given by actor", + "disable_correlation": true, + "misp-attribute": "text", + "ui-priority": 834 + }, "currency": { "description": "The currency of the initial demand. Often USD or BTC.", "disable_correlation": true, @@ -65,8 +84,8 @@ "negotiations_screenshot": { "description": "Screenshot of the negotiations", "disable_correlation": true, - "multiple": true, "misp-attribute": "attachment", + "multiple": true, "ui-priority": 840 }, "negotiations_transcript": { @@ -75,25 +94,6 @@ "misp-attribute": "text", "ui-priority": 850 }, - "chatsite": { - "description": "Chatsite where the negotiations take place", - "disable_correlation": true, - "to_ids": false, - "misp-attribute": "url", - "ui-priority": 835 - }, - "chatsite_id_public": { - "description": "Initial chat ID given by actor", - "disable_correlation": true, - "misp-attribute": "text", - "ui-priority": 834 - }, - "chatsite_id_private": { - "description": "Second, private, chat ID given by actor", - "disable_correlation": true, - "misp-attribute": "text", - "ui-priority": 833 - }, "pay_for_deletion": { "description": "Does the target need/want to pay for data deletion", "disable_correlation": true,