{ "name": "email", "uuid": "a0c666e0-fc65-4be8-b48f-3423d788b552", "meta-category": "network", "description": "Email object describing an email with meta-information", "version": 2, "attributes": { "reply-to": { "misp-attribute": "email-reply-to", "ui-priority": 1, "categories": [ "Payload delivery" ] }, "message-id": { "misp-attribute": "email-message-id", "ui-priority": 0, "categories": [ "Payload delivery" ] }, "to": { "misp-attribute": "email-dst", "ui-priority": 1, "categories": [ "Payload delivery" ], "multiple": true }, "to-display-name": { "misp-attribute": "email-dst-display-name", "ui-priority": 1, "categories": [ "Payload delivery" ], "multiple": true }, "subject": { "misp-attribute": "email-subject", "ui-priority": 1, "categories": [ "Payload delivery" ] }, "attachment": { "misp-attribute": "email-attachment", "ui-priority": 0, "categories": [ "Payload delivery" ], "multiple": true }, "x-mailer": { "misp-attribute": "email-x-mailer", "ui-priority": 0, "categories": [ "Payload delivery" ] }, "header": { "misp-attribute": "email-header", "ui-priority": 0, "categories": [ "Payload delivery" ], "multiple": true }, "send-date": { "misp-attribute": "datetime", "ui-priority": 0, "disable_correlation": true, "categories": [ "Other" ] }, "url": { "misp-attribute": "url", "ui-priority": 0, "categories": [ "Payload delivery" ], "multiple": true }, "mime-boundary": { "misp-attribute": "email-mime-boundary", "ui-priority": 0, "categories": [ "Payload delivery" ] }, "thread-index": { "misp-attribute": "email-thread-index", "ui-priority": 0, "categories": [ "Payload delivery" ] }, "from": { "misp-attribute": "email-src", "ui-priority": 1, "categories": [ "Payload delivery" ] }, "from-display-name": { "misp-attribute": "email-src-display-name", "ui-priority": 1, "categories": [ "Payload delivery" ] } }, "requiredOneOf": [ "email-src", "email-src-display-name", "email-dst", "email-dst-display-name", "email-subject", "email-attachment", "email-message-id", "email-reply-to", "send-date", "url", "email-mime-boundary", "email-thread-index", "email-header", "x-mailer" ] }