MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [cs-beacon-config] updated to add details requested by ShadowServer

pull/411/head
Alexandre Dulaunoy 2023-12-07 10:54:40 +01:00
parent 7f77dbe685
commit fcd2cf2445
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 33 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
objects/cs-beacon-config/definition.json
View File

@ -1,5 +1,11 @@
{
"attributes": {
"asn": {
"description": "Originating ASN for the CS Beacon Config",
"disable_correlation": true,
"misp-attribute": "AS",
"ui-priority": 0
},
"c2": {
"categories": [
"Network activity"
@ -9,6 +15,18 @@
"multiple": true,
"ui-priority": 1
},
"city": {
"description": "City location of the CS Beacon Config in question",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 0
},
"geo": {
"description": "Country location of the CS Beacon Config",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 0
},
"ip": {
"description": "IP of the C2",
"misp-attribute": "ip-dst",
@ -36,6 +54,20 @@
"misp-attribute": "md5",
"ui-priority": 1
},
"naics": {
"description": "North American Industry Classification System Code",
"disable_correlation": true,
"misp-attribute": "text",
"multiple": true,
"ui-priority": 0
},
"sector": {
"description": "Sector of for the CS Beacon Config in question",
"disable_correlation": true,
"misp-attribute": "text",
"multiple": true,
"ui-priority": 0
},
"sha1": {
"categories": [
"Payload delivery"
@ -80,5 +112,5 @@
"watermark"
],
"uuid": "d17355ef-ca1f-4b5a-86cd-65d877991f54",
"version": 2
"version": 3
}