{ "attributes": { "domain": { "categories": [ "Network activity", "External analysis" ], "description": "Domain", "misp-attribute": "domain", "multiple": true, "ui-priority": 1 }, "dst-port": { "categories": [ "Network activity", "External analysis" ], "description": "Destination port", "disable_correlation": true, "misp-attribute": "port", "multiple": true, "ui-priority": 1 }, "first-seen": { "description": "First time the tuple has been seen", "disable_correlation": true, "misp-attribute": "datetime", "ui-priority": 0 }, "hostname": { "categories": [ "Network activity", "External analysis" ], "description": "Hostname", "misp-attribute": "hostname", "multiple": true, "ui-priority": 1 }, "ip": { "categories": [ "Network activity", "External analysis" ], "description": "IP Address", "misp-attribute": "ip-dst", "multiple": true, "ui-priority": 1 }, "ip-dst": { "categories": [ "Network activity", "External analysis" ], "description": "destination IP address", "misp-attribute": "ip-dst", "multiple": true, "ui-priority": 1 }, "ip-src": { "categories": [ "Network activity", "External analysis" ], "description": "source IP address", "misp-attribute": "ip-src", "multiple": true, "ui-priority": 1 }, "last-seen": { "description": "Last time the tuple has been seen", "disable_correlation": true, "misp-attribute": "datetime", "ui-priority": 0 }, "src-port": { "categories": [ "Network activity", "External analysis" ], "description": "Source port", "misp-attribute": "port", "multiple": true, "ui-priority": 0 }, "text": { "description": "Description of the tuple", "disable_correlation": true, "misp-attribute": "text", "ui-priority": 0 } }, "description": "An IP address (or domain or hostname) and a port seen as a tuple (or as a triple) in a specific time frame.", "meta-category": "network", "name": "ip-port", "requiredOneOf": [ "dst-port", "src-port", "domain", "hostname", "ip", "ip-src", "ip-dst" ], "uuid": "9f8cea74-16fe-4968-a2b4-026676949ac6", "version": 8 }