MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

Whois object added

pull/2/head
Alexandre Dulaunoy 2016-02-09 16:08:15 +01:00
parent 433d7c5669
commit fc5ecd7c69
1 changed files with 37 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
objects/whois/definition.json Normal file
View File

@ -0,0 +1,37 @@
{
"name": "whois",
"meta-category": "network",
"description": "Whois records information for a domain name.",
"version": 1,
"attributes" :
{
"domain": {
"misp-attribute": "domain",
"misp-usage-frequency": 1,
"categories": ["Network activity","External analysis"]
},
"creation-date": {
"misp-attribute": "datetime",
"misp-usage-frequency": 0
},
"registrant-email": {
"misp-attribute": "whois-registrant-email",
"misp-usage-frequency": 1
},
"registrant-phone": {
"misp-attribute": "whois-registrant-phone",
"misp-usage-frequency": 0
},
"registrant-name": {
"misp-attribute": "whois-registrant-name",
"misp-usage-frequency": 0
},
"registar": {
"misp-attribute": "whois-registar",
"misp-usage-frequency": 0
}
},
"required": ["domain"],
"requiredOneOf": ["registrant-email", "registrant-phone", "creation-date", "registrant-name", "registar"]
}