From c8e7cea45be5a4f2e1e85142670e9dc5e4d81bc9 Mon Sep 17 00:00:00 2001 From: Dennis Rand Date: Tue, 10 Apr 2018 16:03:05 +0000 Subject: [PATCH 1/2] Added target-system as object --- objects/target-system/definition.json | 39 +++++++++++++++++++++++++++ 1 file changed, 39 insertions(+) create mode 100644 objects/target-system/definition.json diff --git a/objects/target-system/definition.json b/objects/target-system/definition.json new file mode 100644 index 0000000..8b9a681 --- /dev/null +++ b/objects/target-system/definition.json @@ -0,0 +1,39 @@ +{ + "name": "target-system", + "uuid": "3110944f-eca0-4c94-9d61-a84d022228a4", + "meta-category": "Targeting data", + "description": "Description about an targeted system, this could potentially be a compromissed internal system", + "version": 1, + "attributes": { + "targeted_machine": { + "description": "Targeted system", + "ui-priority": 1, + "misp-attribute": "target-machine", + "disable_correlation": true, + "categories": [ + "Targeting data" + ] + }, + "targeted_ip_of_system": { + "description": "Targeted system IP address", + "ui-priority": 1, + "misp-attribute": "ip-src", + "disable_correlation": true, + "categories": [ + "Network activity" + ] + }, + "timestamp_seen": { + "description": "Registered date and time", + "ui-priority": 1, + "misp-attribute": "datetime", + "disable_correlation": true, + "categories": [ + "Other" + ] + } + }, + "requiredOneOf": [ + "targeted_machine" + ] +} From 8744ff50a3a7ffa5a9995683cb8cd83d281cb324 Mon Sep 17 00:00:00 2001 From: Dennis Rand Date: Tue, 10 Apr 2018 16:08:04 +0000 Subject: [PATCH 2/2] moved object into internal --- objects/target-system/definition.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/objects/target-system/definition.json b/objects/target-system/definition.json index 8b9a681..6ed6cc0 100644 --- a/objects/target-system/definition.json +++ b/objects/target-system/definition.json @@ -1,7 +1,7 @@ { "name": "target-system", "uuid": "3110944f-eca0-4c94-9d61-a84d022228a4", - "meta-category": "Targeting data", + "meta-category": "internal", "description": "Description about an targeted system, this could potentially be a compromissed internal system", "version": 1, "attributes": {