mirror of https://github.com/MISP/misp-objects
Merge pull request #246 from VVX7/master
chg: [object] update narrative required object fieldspull/249/head
GitHub
commit
fd1aed4eb1
|
|
@ -2,7 +2,6 @@
|
|||
"requiredOneOf": [
|
||||
"attachment",
|
||||
"archive",
|
||||
"narrative-description",
|
||||
"narrative-summary"
|
||||
],
|
||||
"attributes": {
|
||||
|
|
@ -76,6 +75,6 @@
|
|||
"version": 4,
|
||||
"description": "Object describing a narrative.",
|
||||
"meta-category": "misc",
|
||||
"uuid": "fb965678-e14f-4485-bc6c-3fc5463e5318",
|
||||
"uuid": "83bea299-514a-4719-a84b-f6fd0997fac1",
|
||||
"name": "narrative"
|
||||
}
|
||||
|
|
|
|||
|
|
@ -0,0 +1,129 @@
|
|||
{
|
||||
"requiredOneOf": [
|
||||
"event-name",
|
||||
"event-alias",
|
||||
"archive",
|
||||
"attachment"
|
||||
],
|
||||
"attributes": {
|
||||
"event-name": {
|
||||
"description": "The name of the event.",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text"
|
||||
},
|
||||
"event-alias": {
|
||||
"description": "Aliases of event.",
|
||||
"ui-priority": 1,
|
||||
"multiple": true,
|
||||
"misp-attribute": "text"
|
||||
},
|
||||
"event-listing": {
|
||||
"description": "Social media and other platforms on which the event is advertised.",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text",
|
||||
"disable_correlation": true,
|
||||
"multiple": true,
|
||||
"sane_default": [
|
||||
"Twitter",
|
||||
"Facebook",
|
||||
"Meetup",
|
||||
"Eventbrite",
|
||||
"Other"
|
||||
]
|
||||
},
|
||||
"username": {
|
||||
"description": "A user account who is going to the event.",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text",
|
||||
"multiple": true
|
||||
},
|
||||
"person-name": {
|
||||
"description": "A person who is going to the event.",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text",
|
||||
"multiple": true
|
||||
},
|
||||
"administrator": {
|
||||
"description": "A user account who is an owner or admin of the event.",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text",
|
||||
"multiple": true
|
||||
},
|
||||
"hashtag": {
|
||||
"description": "Hashtag used to identify or promote the event.",
|
||||
"ui-priority": 0,
|
||||
"misp-attribute": "text",
|
||||
"multiple": true
|
||||
},
|
||||
"url": {
|
||||
"description": "Original URL location of the event (potentially malicious).",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "url"
|
||||
},
|
||||
"link": {
|
||||
"description": "Original link into the event (supposed harmless).",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "link"
|
||||
},
|
||||
"phone-number": {
|
||||
"description": "Phone number of the event contact.",
|
||||
"ui-priority": 10,
|
||||
"misp-attribute": "phone-number",
|
||||
"multiple": true
|
||||
},
|
||||
"fax-number": {
|
||||
"description": "Fax number of the event contact.",
|
||||
"ui-priority": 10,
|
||||
"misp-attribute": "phone-number",
|
||||
"multiple": true
|
||||
},
|
||||
"address": {
|
||||
"description": "Postal address of the event.",
|
||||
"ui-priority": 10,
|
||||
"misp-attribute": "text",
|
||||
"multiple": true
|
||||
},
|
||||
"e-mail": {
|
||||
"description": "Email address of the event contact.",
|
||||
"ui-priority": 10,
|
||||
"misp-attribute": "email-src",
|
||||
"multiple": true
|
||||
},
|
||||
"embedded-link": {
|
||||
"description": "Link embedded in the event description (potentially malicious).",
|
||||
"ui-priority": 0,
|
||||
"misp-attribute": "url",
|
||||
"multiple": true
|
||||
},
|
||||
"embedded-safe-link": {
|
||||
"description": "Link embedded in the event description (supposed safe).",
|
||||
"ui-priority": 0,
|
||||
"misp-attribute": "link",
|
||||
"multiple": true,
|
||||
"to_ids": false
|
||||
},
|
||||
"archive": {
|
||||
"description": "Archive of the original event (Internet Archive, Archive.is, etc).",
|
||||
"ui-priority": 1,
|
||||
"multiple": true,
|
||||
"misp-attribute": "link"
|
||||
},
|
||||
"attachment": {
|
||||
"description": "A screen capture or other attachment relevant to the event.",
|
||||
"ui-priority": 1,
|
||||
"multiple": true,
|
||||
"misp-attribute": "attachment"
|
||||
},
|
||||
"scheduled-date": {
|
||||
"description": "Initial creation of the microblog post",
|
||||
"ui-priority": 0,
|
||||
"multiple": true,
|
||||
"misp-attribute": "datetime"
|
||||
}
|
||||
},
|
||||
"version": 1,
|
||||
"description": "Event object template describing a gathering of individuals in meatspace.",
|
||||
"meta-category": "misc",
|
||||
"uuid": "40ba0098-cfd8-4b54-b5a8-9adcdf47533d",
|
||||
"name": "scheduled-event"
|
||||
}
|
||||
|
|
@ -0,0 +1,102 @@
|
|||
{
|
||||
"requiredOneOf": [
|
||||
"group-name",
|
||||
"group-alias",
|
||||
"archive",
|
||||
"description"
|
||||
],
|
||||
"attributes": {
|
||||
"group-name": {
|
||||
"description": "The name of the group, channel or community.",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text"
|
||||
},
|
||||
"description": {
|
||||
"description": "A description of the group, channel or community.",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text"
|
||||
},
|
||||
"group-alias": {
|
||||
"description": "Aliases of group, channel or community.",
|
||||
"ui-priority": 1,
|
||||
"multiple": true,
|
||||
"misp-attribute": "text"
|
||||
},
|
||||
"platform": {
|
||||
"description": "The social media platform used.",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text",
|
||||
"disable_correlation": true,
|
||||
"multiple": true,
|
||||
"sane_default": [
|
||||
"Facebook",
|
||||
"Twitter"
|
||||
]
|
||||
},
|
||||
"username": {
|
||||
"description": "A user account who is a member of the group.",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text",
|
||||
"multiple": true
|
||||
},
|
||||
"administrator": {
|
||||
"description": "A user account who is an owner or admin of the group.",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text",
|
||||
"multiple": true
|
||||
},
|
||||
"person-name": {
|
||||
"description": "A person who is a member of the group.",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "text",
|
||||
"multiple": true
|
||||
},
|
||||
"hashtag": {
|
||||
"description": "Hashtag used to identify or promote the group.",
|
||||
"ui-priority": 0,
|
||||
"misp-attribute": "text",
|
||||
"multiple": true
|
||||
},
|
||||
"url": {
|
||||
"description": "Original URL location of the group (potentially malicious).",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "url"
|
||||
},
|
||||
"link": {
|
||||
"description": "Original link into the group (supposed harmless).",
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "link"
|
||||
},
|
||||
"embedded-link": {
|
||||
"description": "Link embedded in the group description (potentially malicious).",
|
||||
"ui-priority": 0,
|
||||
"misp-attribute": "url",
|
||||
"multiple": true
|
||||
},
|
||||
"embedded-safe-link": {
|
||||
"description": "Link embedded in the group description (supposed safe).",
|
||||
"ui-priority": 0,
|
||||
"misp-attribute": "link",
|
||||
"multiple": true,
|
||||
"to_ids": false
|
||||
},
|
||||
"archive": {
|
||||
"description": "Archive of the original group (Internet Archive, Archive.is, etc).",
|
||||
"ui-priority": 1,
|
||||
"multiple": true,
|
||||
"disable_correlation": true,
|
||||
"misp-attribute": "link"
|
||||
},
|
||||
"attachment": {
|
||||
"description": "A screen capture or exported list of contacts, group members, etc.",
|
||||
"ui-priority": 1,
|
||||
"multiple": true,
|
||||
"misp-attribute": "attachment"
|
||||
}
|
||||
},
|
||||
"version": 1,
|
||||
"description": "Social media group object template describing a public or private group or channel.",
|
||||
"meta-category": "misc",
|
||||
"uuid": "c4939ec4-ab53-4c35-9a98-3d4d4caf5b6c",
|
||||
"name": "social-media-group"
|
||||
}
|
||||
Loading…
Reference in New Issue