{ "requiredOneOf": [ "url" ], "attributes": { "fragment": { "ui-frequency": 0, "misp-attribute": "text" }, "tld": { "ui-frequency": 0, "misp-attribute": "tld" }, "port": { "ui-frequency": 0, "misp-attribute": "text" }, "scheme": { "sane_default": [ "http", "https", "ftp", "gopher", "sip" ], "ui-frequency": 0, "misp-attribute": "text" }, "first-seen": { "ui-frequency": 0, "misp-attribute": "datetime" }, "resource_path": { "ui-frequency": 0, "misp-attribute": "text" }, "query_string": { "ui-frequency": 0, "misp-attribute": "text" }, "url": { "ui-frequency": 1, "misp-attribute": "url" }, "domain_without_tld": { "ui-frequency": 0, "misp-attribute": "text" }, "domain": { "ui-frequency": 0, "misp-attribute": "domain" }, "subdomain": { "ui-frequency": 0, "misp-attribute": "text" }, "credential": { "ui-frequency": 0, "misp-attribute": "text" }, "text": { "ui-frequency": 0, "misp-attribute": "text" }, "last-seen": { "ui-frequency": 0, "misp-attribute": "datetime" }, "host": { "ui-frequency": 0, "misp-attribute": "hostname" } }, "version": 1, "description": "url object describes an url along with its normalized field (like extracted using faup parsing library) and its metadata.", "meta-category": "network", "uuid": "60efb77b-40b5-4c46-871b-ed1ed999fce5", "name": "url" }