MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

Adding optional ip-src to http-request 

modified existing "ip" attribute to "ip-dst", and added attribute for ip-src.   This allows http-request to be used in scenarios where observed connections are source specific, not destination specific.
pull/239/head
cbboggs 2020-03-05 12:24:14 -06:00 committed by GitHub
parent 3d57ee4fd2
commit fa6fe463a9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
objects/http-request/definition.json
View File

@ -61,7 +61,7 @@
"ui-priority": 1, "ui-priority": 1,
"misp-attribute": "hostname" "misp-attribute": "hostname"
}, },
"ip": { "ip-dst": {
"categories": [ "categories": [
"Network activity", "Network activity",
"Payload delivery" "Payload delivery"
@ -70,6 +70,15 @@
"ui-priority": 1, "ui-priority": 1,
"misp-attribute": "ip-dst" "misp-attribute": "ip-dst"
}, },
"ip-src": {
"categories": [
"Network activity",
"Payload delivery"
],
"description": "The IP address of the client",
"ui-priority": 1,
"misp-attribute": "ip-src"
},
"method": { "method": {
"categories": [ "categories": [
"Network activity" "Network activity"