From ff8e9c0a36eda6922e762a11f26672e92a22fb38 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Wed, 22 Mar 2017 07:30:42 +0100
Subject: [PATCH] geolocation - an object to describe a geographic location.

---
 objects/geolocation/definition.json | 64 +++++++++++++++++++++++++++++
 1 file changed, 64 insertions(+)
 create mode 100644 objects/geolocation/definition.json

diff --git a/objects/geolocation/definition.json b/objects/geolocation/definition.json
new file mode 100644
index 0000000..020433b
--- /dev/null
+++ b/objects/geolocation/definition.json
@@ -0,0 +1,64 @@
+{
+  "requiredOneOf": [
+    "latitude",
+    "longitude",
+    "country"
+  ],
+  "attributes": {
+    "text": {
+      "description": "A generic description of the location.",
+      "disable_correlation": true,
+      "misp-usage-frequency": 1,
+      "misp-attribute": "text"
+    },
+    "latitude": {
+      "description": "The latitude is the decimal value of the latitude in the World Geodetic System 84 (WGS84) reference.",
+      "disable_correlation": true,
+      "misp-usage-frequency": 1,
+      "misp-attribute": "float"
+    },
+    "longitude": {
+      "description": "The longitude is the decimal value of the longitude in the World Geodetic System 84 (WGS84) reference",
+      "disable_correlation": true,
+      "misp-usage-frequency": 1,
+      "misp-attribute": "float"
+    },
+    "altitude": {
+      "description": "The altitude is the decimal value of the altitude in the World Geodetic System 84 (WGS84) reference.",
+      "misp-usage-frequency": 0,
+      "misp-attribute": "float"
+    },
+    "city": {
+      "description": "City.",
+      "misp-attribute": "text",
+      "misp-usage-frequency": 1
+    },
+    "region": {
+      "description": "Region.",
+      "misp-attribute": "text",
+      "misp-usage-frequency": 1
+     },
+    "country": {
+      "description": "Country.",
+      "misp-attribute": "text",
+      "misp-usage-frequency": 1
+    },
+    "first-seen": {
+      "description": "When the location was seen for the first time.",
+      "disable_correlation": true,
+      "misp-usage-frequency": 0,
+      "misp-attribute": "datetime"
+    },
+    "last-seen": {
+      "description": "When the location was seen for the last time.",
+      "disable_correlation": true,
+      "misp-usage-frequency": 0,
+      "misp-attribute": "datetime"
+    }
+  },
+  "version": 1,
+  "description": "An object to describe a geographic location.",
+  "meta-category": "location",
+  "uuid": "fdd30d5f-6752-45ed-bef2-25e8ce4d8a3",
+  "name": "geolocation"
+}