MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

ui-priority

pull/17/head
Alexandre Dulaunoy 2017-07-03 16:51:54 +02:00
parent e8c74fbccc
commit f700e9ea52
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
README.md
View File

@ -20,21 +20,21 @@ Feel free to propose your own MISP objects to be included in MISP. The system is
{ {
"ip": { "ip": {
"misp-attribute": "ip-dst", "misp-attribute": "ip-dst",
"misp-usage-frequency": 1, "ui-priority": 1,
"categories": ["Network activity","External analysis"] "categories": ["Network activity","External analysis"]
}, },
"domain": { "domain": {
"misp-attribute": "domain", "misp-attribute": "domain",
"misp-usage-frequency": 1, "ui-priority": 1,
"categories": ["Network activity","External analysis"] "categories": ["Network activity","External analysis"]
}, },
"first-seen": { "first-seen": {
"misp-attribute": "datetime", "misp-attribute": "datetime",
"misp-usage-frequency": 0 "ui-priority": 0
}, },
"last-seen": { "last-seen": {
"misp-attribute": "datetime", "misp-attribute": "datetime",
"misp-usage-frequency": 0 "ui-priority": 0
} }
}, },
@ -53,7 +53,7 @@ A MISP object is described in a simple JSON file containing the following elemen
* **attributes** contains another JSON object listing all the attributes composing the object. * **attributes** contains another JSON object listing all the attributes composing the object.
Each attribute must contain a reference **misp-attribute** to reference an existing attribute definition in MISP. Each attribute must contain a reference **misp-attribute** to reference an existing attribute definition in MISP.
An array **categories** shall be used to described in which categories the attribute is. The **misp-usage-frequency** An array **categories** shall be used to described in which categories the attribute is. The **ui-priority**
describes the usage frequency of an attribute. This helps to only display the most frequently used attributes and describes the usage frequency of an attribute. This helps to only display the most frequently used attributes and
allowing advanced users to show all the attributes depending of their configuration. An optional **multiple** field allowing advanced users to show all the attributes depending of their configuration. An optional **multiple** field
shall be set to true if multiple elements of the same key can be used in the object. An optional **required_value** shall be set to true if multiple elements of the same key can be used in the object. An optional **required_value**