From e066df4e6d1e6a8d09f40a463cadb9fa84ca5722 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Thu, 9 May 2019 17:35:14 +0200
Subject: [PATCH] chg: [microblog] state field added to describe if the tweet
 is malicious or just OSINT.

---
 objects/microblog/definition.json | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/objects/microblog/definition.json b/objects/microblog/definition.json
index 847fceb..877226b 100644
--- a/objects/microblog/definition.json
+++ b/objects/microblog/definition.json
@@ -29,6 +29,17 @@
         "Other"
       ]
     },
+    "state": {
+      "misp-attribute": "text",
+      "ui-priority": 0,
+      "description": "State of the microblog post",
+      "disable_correlation": true,
+      "values_list": [
+        "Informative",
+        "Malicious",
+        "Unknown"
+      ]
+    },
     "username": {
       "description": "Username who posted the microblog post (without the @ prefix)",
       "ui-priority": 0,
@@ -62,7 +73,7 @@
       "misp-attribute": "text"
     }
   },
-  "version": 5,
+  "version": 6,
   "description": "Microblog post like a Twitter tweet or a post on a Facebook wall.",
   "meta-category": "misc",
   "uuid": "8ec8c911-ddbe-4f5b-895b-fbff70c42a60",