From fa6fe463a9d03d680a06a42f5cf159664e4f40ea Mon Sep 17 00:00:00 2001 From: cbboggs <18554987+cbboggs@users.noreply.github.com> Date: Thu, 5 Mar 2020 12:24:14 -0600 Subject: [PATCH] Adding optional ip-src to http-request modified existing "ip" attribute to "ip-dst", and added attribute for ip-src. This allows http-request to be used in scenarios where observed connections are source specific, not destination specific. --- objects/http-request/definition.json | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/objects/http-request/definition.json b/objects/http-request/definition.json index 32c119d..79d535c 100644 --- a/objects/http-request/definition.json +++ b/objects/http-request/definition.json @@ -61,7 +61,7 @@ "ui-priority": 1, "misp-attribute": "hostname" }, - "ip": { + "ip-dst": { "categories": [ "Network activity", "Payload delivery" @@ -70,6 +70,15 @@ "ui-priority": 1, "misp-attribute": "ip-dst" }, + "ip-src": { + "categories": [ + "Network activity", + "Payload delivery" + ], + "description": "The IP address of the client", + "ui-priority": 1, + "misp-attribute": "ip-src" + }, "method": { "categories": [ "Network activity"