mirror of https://github.com/MISP/misp-objects
1906 lines
47 KiB
JSON
1906 lines
47 KiB
JSON
{
|
|
"description": "Default type of relationships in MISP objects.",
|
|
"name": "relationships",
|
|
"uuid": "b002c0d6-320f-450d-82c4-b3aa15bbbd6c",
|
|
"values": [
|
|
{
|
|
"description": "The information in the target object is based on information from the source object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-2.0",
|
|
"alfred"
|
|
],
|
|
"name": "derived-from"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which executes another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "executes",
|
|
"opposite": "executed-by"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which shares another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "shares",
|
|
"opposite": "shared-by"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which was shared by another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "shared-by",
|
|
"opposite": "shares"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which publishes another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "publishes",
|
|
"opposite": "published-by"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which was published by another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "published-by",
|
|
"opposite": "publishes"
|
|
},
|
|
{
|
|
"description": "The referenced source and target objects are semantically duplicates of each other.",
|
|
"format": [
|
|
"misp",
|
|
"stix-2.0"
|
|
],
|
|
"name": "duplicate-of"
|
|
},
|
|
{
|
|
"description": "The referenced source is related to the target object.",
|
|
"format": [
|
|
"alfred",
|
|
"followthemoney",
|
|
"misp",
|
|
"stix-2.0"
|
|
],
|
|
"name": "related-to"
|
|
},
|
|
{
|
|
"description": "The referenced source is connected to the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1"
|
|
],
|
|
"name": "connected-to",
|
|
"opposite": "connected-from"
|
|
},
|
|
{
|
|
"description": "The referenced source is connected from the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1"
|
|
],
|
|
"name": "connected-from",
|
|
"opposite": "connected-to"
|
|
},
|
|
{
|
|
"description": "The referenced source is containing the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1",
|
|
"alfred"
|
|
],
|
|
"name": "contains",
|
|
"opposite": "contained-by"
|
|
},
|
|
{
|
|
"description": "The referenced source is contained by the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1"
|
|
],
|
|
"name": "contained-by",
|
|
"opposite": "contains"
|
|
},
|
|
{
|
|
"description": "The referenced source is contained within the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1"
|
|
],
|
|
"name": "contained-within"
|
|
},
|
|
{
|
|
"description": "The referenced source is characterized by the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1"
|
|
],
|
|
"name": "characterized-by",
|
|
"opposite": "characterizes"
|
|
},
|
|
{
|
|
"description": "The referenced source is characterizing the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1"
|
|
],
|
|
"name": "characterizes",
|
|
"opposite": "characterized-by"
|
|
},
|
|
{
|
|
"description": "The referenced source has queried the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1"
|
|
],
|
|
"name": "properties-queried",
|
|
"opposite": "properties-queried-by"
|
|
},
|
|
{
|
|
"description": "The referenced source is queried by the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1"
|
|
],
|
|
"name": "properties-queried-by",
|
|
"opposite": "properties-queried"
|
|
},
|
|
{
|
|
"description": "The referenced source is extracted from the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1"
|
|
],
|
|
"name": "extracted-from"
|
|
},
|
|
{
|
|
"description": "The referenced source is a supra domain of the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1"
|
|
],
|
|
"name": "supra-domain-of",
|
|
"opposite": "sub-domain-of"
|
|
},
|
|
{
|
|
"description": "The referenced source is a sub domain of the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1"
|
|
],
|
|
"name": "sub-domain-of",
|
|
"opposite": "supra-domain-of"
|
|
},
|
|
{
|
|
"description": "The referenced source has dropped the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1"
|
|
],
|
|
"name": "dropped"
|
|
},
|
|
{
|
|
"description": "The referenced source is dropped by the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1"
|
|
],
|
|
"name": "dropped-by"
|
|
},
|
|
{
|
|
"description": "The referenced source has downloaded the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1"
|
|
],
|
|
"name": "downloaded",
|
|
"opposite": "downloaded-from"
|
|
},
|
|
{
|
|
"description": "The referenced source has been downloaded from the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1"
|
|
],
|
|
"name": "downloaded-from",
|
|
"opposite": "downloaded"
|
|
},
|
|
{
|
|
"description": "The referenced source is resolved to the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-1.1"
|
|
],
|
|
"name": "resolved-to"
|
|
},
|
|
{
|
|
"description": "This referenced source is attributed to the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-2.0"
|
|
],
|
|
"name": "attributed-to"
|
|
},
|
|
{
|
|
"description": "This relationship describes that the source object targets the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-2.0"
|
|
],
|
|
"name": "targets",
|
|
"opposite": "targeted-by"
|
|
},
|
|
{
|
|
"description": "This relationship describes the use by the source object of the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-2.0",
|
|
"alfred"
|
|
],
|
|
"name": "uses",
|
|
"opposite": "used-by"
|
|
},
|
|
{
|
|
"description": "This relationship describes that the source object indicates the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-2.0"
|
|
],
|
|
"name": "indicates",
|
|
"opposite": "indicated-by"
|
|
},
|
|
{
|
|
"description": "This relationship describes that the source object is indicated by the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-2.1"
|
|
],
|
|
"name": "indicated-by",
|
|
"opposite": "indicates"
|
|
},
|
|
{
|
|
"description": "This relationship describes that the source object mentions the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "mentions"
|
|
},
|
|
{
|
|
"description": "This relationship describes a source object which mitigates the target object.",
|
|
"format": [
|
|
"misp",
|
|
"stix-2.0"
|
|
],
|
|
"name": "mitigates"
|
|
},
|
|
{
|
|
"description": "This relationship describes a source object which is a variant of the target object",
|
|
"format": [
|
|
"misp",
|
|
"stix-2.0",
|
|
"alfred"
|
|
],
|
|
"name": "variant-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes a source object which impersonates the target object",
|
|
"format": [
|
|
"misp",
|
|
"stix-2.0"
|
|
],
|
|
"name": "impersonates"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object retrieved from the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "retrieved-from"
|
|
},
|
|
{
|
|
"description": "This relationship describes the author of a specific object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "authored-by",
|
|
"opposite": "is-author-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object being author by someone.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "is-author-of",
|
|
"opposite": "authored-by"
|
|
},
|
|
{
|
|
"description": "This relationship describes the location (of any type) of a specific object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "located"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object included in another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "included-in",
|
|
"opposite": "includes"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object that includes an other object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "includes",
|
|
"opposite": "included-in"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object analysed by another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "analysed-with"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object claimed by another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "claimed-by"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object communicating with another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "communicates-with"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which drops another object",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "drops"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object executed by another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "executed-by",
|
|
"opposite": "executes"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object that affects another object.",
|
|
"format": [
|
|
"misp",
|
|
"alfred"
|
|
],
|
|
"name": "affects",
|
|
"opposite": "affected-by"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object affected by another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "affected-by",
|
|
"opposite": "affects"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object beaconing to another object.",
|
|
"format": [
|
|
"misp",
|
|
"alfred"
|
|
],
|
|
"name": "beacons-to"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which abuses another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "abuses"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object exfiltrating to another object.",
|
|
"format": [
|
|
"misp",
|
|
"alfred"
|
|
],
|
|
"name": "exfiltrates-to"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which identifies another object.",
|
|
"format": [
|
|
"misp",
|
|
"alfred"
|
|
],
|
|
"name": "identifies"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which intercepts another object.",
|
|
"format": [
|
|
"misp",
|
|
"alfred"
|
|
],
|
|
"name": "intercepts"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which calls another objects.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "calls"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is detected as another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "detected-as"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is followed by another object. This can be used when a time reference is missing but a sequence is known.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "followed-by",
|
|
"opposite": "preceded-by"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is preceded by another object. This can be used when a time reference is missing but a sequence is known.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "preceded-by",
|
|
"opposite": "followed-by"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which triggers another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "triggers"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is a vulnerability of another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "vulnerability-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which works like another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "works-like"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is selling another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "seller-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is selling on another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "seller-on"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is trying to obtain the exploit described by another object",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "trying-to-obtain-the-exploit"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is used by another object.",
|
|
"format": [
|
|
"cert-eu",
|
|
"stix-2.1"
|
|
],
|
|
"name": "used-by",
|
|
"opposite": "uses"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which hosts another object.",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "hosts",
|
|
"opposite": "hosted-by"
|
|
},
|
|
{
|
|
"description": "This relatiobship describes an object hosted by another object.",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "hosted-by",
|
|
"opposite": "hosts"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which consists of one or more object(s).",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "consists"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which delivers to one or more object(s).",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "delivers"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is affiliated with another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "affiliated"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is the alleged founder of another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "alleged-founder-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which attacks another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "attacking-other-group"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which belongs to another object.",
|
|
"format": [
|
|
"cert-eu",
|
|
"followthemoney"
|
|
],
|
|
"name": "belongs-to"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which has business relations with another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "business-relations"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which claims to be the founder of another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "claims-to-be-the-founder-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which cooperates with another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "cooperates-with"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is a former member of another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "former-member-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is a successor of another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "successor-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which has joined another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "has-joined"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is a member of another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "member-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is a primary member of another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "primary-member-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is an administrator of another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "administrator-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is in relation with another object,",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "is-in-relation-with"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which provides support to another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "provide-support-to"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is a regional branch of another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "regional-branch"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is similar to another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "similar"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is a subgroup of another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "subgroup"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is suspected to be linked with another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "suspected-link"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is the same as another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "same-as"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is the creator of another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "creator-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is a developer of another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "developer-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which uses another object for recon.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "uses-for-recon"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is an operator of another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "operator-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which overlaps another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "overlaps"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which owns another object.",
|
|
"format": [
|
|
"cert-eu",
|
|
"alfred"
|
|
],
|
|
"name": "owner-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which publishes method for another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "publishes-method-for"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which recommends the use of another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "recommends-use-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which released source code of another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "released-source-code"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which release another object.",
|
|
"format": [
|
|
"cert-eu"
|
|
],
|
|
"name": "released"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object (like a PoC/exploit) which exploits another object (such as a vulnerability object).",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "exploits"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object signed by another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "signed-by"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object by another object (such as exploit kit, dropper).",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "delivered-by"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which controls another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "controls"
|
|
},
|
|
{
|
|
"description": "This relationships describes an object which annotates another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "annotates"
|
|
},
|
|
{
|
|
"description": "This relationships describes an object which references another object or attribute.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "references"
|
|
},
|
|
{
|
|
"description": "A child semantic link to a parent.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "child-of"
|
|
},
|
|
{
|
|
"description": "A parent semantic link to a child.",
|
|
"format": [
|
|
"alfred",
|
|
"misp"
|
|
],
|
|
"name": "parent-of"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of having compromised something.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "compromised"
|
|
},
|
|
{
|
|
"description": "The initiator of a connection.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "connects"
|
|
},
|
|
{
|
|
"description": "The destination or target of a connection.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "connects-to"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of one thing being the cover term for another.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "cover-term-for"
|
|
},
|
|
{
|
|
"description": "Semantic link indicating where information is disclosed to.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "disclosed-to"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of one thing downloading another.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "downloads",
|
|
"opposite": "downloads-from"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of malware being downloaded from a location.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "downloads-from",
|
|
"opposite": "downloads"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of an alert generated from a signature.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "generated"
|
|
},
|
|
{
|
|
"description": "One data object implements another.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "implements"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of a communication initiating an event.",
|
|
"format": [
|
|
"alfred",
|
|
"misp"
|
|
],
|
|
"name": "initiates",
|
|
"opposite": "initiated-by"
|
|
},
|
|
{
|
|
"description": "The source object initiated the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "initiated-by",
|
|
"opposite": "initiates"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link between a FILE and FILE_BINARY.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "instance-of"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of being the issuer of something.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "issuer-of"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of being associated with something.",
|
|
"format": [
|
|
"alfred",
|
|
"followthemoney"
|
|
],
|
|
"name": "linked-to"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of a comm that is not relevant to an EVENT.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "not-relevant-to"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link that defines one thing to be part of another in a hierachial structure from the child to the parent.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "part-of"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of something has been processed by another program.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "processed-by"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of something having produced something else.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "produced"
|
|
},
|
|
{
|
|
"description": "The IP Address or domain being queried for.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "queried-for"
|
|
},
|
|
{
|
|
"description": "The IP Address or domain returned as the result of a query.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "query-returned"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of someone registered some thing.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "registered",
|
|
"opposite": "registered-to"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of something being registered to.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "registered-to",
|
|
"opposite": "registered"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link between HBS Comms and communication addresses.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "relates"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of a comm that is relevant to an EVENT.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "relevant-to"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of resolving to something.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "resolves-to"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of some entity being responsible for something.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "responsible-for"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of a seeded domain redirecting to another site.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "seeded"
|
|
},
|
|
{
|
|
"description": "A sends semantic link meaning 'who sends what'.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "sends"
|
|
},
|
|
{
|
|
"description": "A sends to as BCC semantic link meaning 'what sends to who as BCC'.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "sends-as-bcc-to"
|
|
},
|
|
{
|
|
"description": "A sends to as CC semantic link meaning 'what sends to who as CC'.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "sends-as-cc-to"
|
|
},
|
|
{
|
|
"description": "A sends to semantic link meaning 'what sends to who'.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "sends-to"
|
|
},
|
|
{
|
|
"description": "The represents the semantic link of having spoofed something.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "spoofer-of"
|
|
},
|
|
{
|
|
"description": "Represents a domain being a subdomain of another.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "subdomain-of"
|
|
},
|
|
{
|
|
"description": "One data object supersedes another.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "supersedes"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of an alert triggered on an event.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "triggered-on"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of one thing uploading another.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "uploads"
|
|
},
|
|
{
|
|
"description": "The represents the semantic link of being the user of something.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "user-of"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of working for something.",
|
|
"format": [
|
|
"alfred"
|
|
],
|
|
"name": "works-for"
|
|
},
|
|
{
|
|
"description": "Represents an object working with another one.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "works-with"
|
|
},
|
|
{
|
|
"description": "Represents an object being a witness of something.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "witness-of"
|
|
},
|
|
{
|
|
"description": "Represents an object injecting something into something",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "injects-into"
|
|
},
|
|
{
|
|
"description": "Represents an object which is injected something into something",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "injected-into"
|
|
},
|
|
{
|
|
"description": "Represents an object that creates something.",
|
|
"format": [
|
|
"misp",
|
|
"haxpak"
|
|
],
|
|
"name": "creates",
|
|
"opposite": "created-by"
|
|
},
|
|
{
|
|
"description": "Represents an object being the screenshot of something.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "screenshot-of"
|
|
},
|
|
{
|
|
"description": "Represents an object having the knowledge of another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "knows"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of describing another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "describes"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of extending another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "extends"
|
|
},
|
|
{
|
|
"description": "Reprensents an object which writes towards another object or attribute",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "writes"
|
|
},
|
|
{
|
|
"description": "Represents the semantic link of an asn object being ranked with a bgp-ranking object",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "ranked-with"
|
|
},
|
|
{
|
|
"description": "owns",
|
|
"format": [
|
|
"followthemoney"
|
|
],
|
|
"name": "owns"
|
|
},
|
|
{
|
|
"description": "awarded-to",
|
|
"format": [
|
|
"followthemoney"
|
|
],
|
|
"name": "awarded-to"
|
|
},
|
|
{
|
|
"description": "directs",
|
|
"format": [
|
|
"followthemoney"
|
|
],
|
|
"name": "directs"
|
|
},
|
|
{
|
|
"description": "involved-in",
|
|
"format": [
|
|
"followthemoney"
|
|
],
|
|
"name": "involved-in"
|
|
},
|
|
{
|
|
"description": "associated-with",
|
|
"format": [
|
|
"followthemoney"
|
|
],
|
|
"name": "associated-with"
|
|
},
|
|
{
|
|
"description": "represents",
|
|
"format": [
|
|
"followthemoney"
|
|
],
|
|
"name": "represents"
|
|
},
|
|
{
|
|
"description": "owes",
|
|
"format": [
|
|
"followthemoney"
|
|
],
|
|
"name": "owes"
|
|
},
|
|
{
|
|
"description": "preceeds",
|
|
"format": [
|
|
"followthemoney"
|
|
],
|
|
"name": "preceeds"
|
|
},
|
|
{
|
|
"description": "documents",
|
|
"format": [
|
|
"followthemoney"
|
|
],
|
|
"name": "documents"
|
|
},
|
|
{
|
|
"description": "paid",
|
|
"format": [
|
|
"followthemoney"
|
|
],
|
|
"name": "paid"
|
|
},
|
|
{
|
|
"description": "leaks",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "leaks",
|
|
"opposite": "leaked-by"
|
|
},
|
|
{
|
|
"description": "leaked-by",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "leaked-by",
|
|
"opposite": "leaks"
|
|
},
|
|
{
|
|
"description": "doxed-by",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "doxed-by"
|
|
},
|
|
{
|
|
"description": "alerts about a specific object",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "alerts"
|
|
},
|
|
{
|
|
"description": "The referenced source object is the legal address of the target.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "legal-address-of"
|
|
},
|
|
{
|
|
"description": "The referenced source object is a shipping address of the target.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "shipping-address-of"
|
|
},
|
|
{
|
|
"description": "The referenced source object visited the target (for example an address).",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "visited"
|
|
},
|
|
{
|
|
"description": "The referenced source object is an office of the target.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "office-of"
|
|
},
|
|
{
|
|
"description": "The referenced source object is a picture (photo/image) of the target.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "picture-of",
|
|
"opposite": "pictured-by"
|
|
},
|
|
{
|
|
"description": "The referenced source object is pictured by the target (photo/image).",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "pictured-by",
|
|
"opposite": "picture-of"
|
|
},
|
|
{
|
|
"description": "The referenced source object has been found on the target (device, server).",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "found-on"
|
|
},
|
|
{
|
|
"description": "The referenced source object has been found in the target (document).",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "found-in"
|
|
},
|
|
{
|
|
"description": "The referenced source object drives the target described (often a vehicule).",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "drives"
|
|
},
|
|
{
|
|
"description": "The referenced source object is a rewrite specified in the target object. The rewrite can be for a computer program text but also any rewrite of a text.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "rewrite"
|
|
},
|
|
{
|
|
"description": "The referenced source object is a friend of the target object.",
|
|
"format": [
|
|
"foaf"
|
|
],
|
|
"name": "friend-of"
|
|
},
|
|
{
|
|
"description": "The referenced source object is an acquaintance of the target object.",
|
|
"format": [
|
|
"foaf"
|
|
],
|
|
"name": "acquaintance-of"
|
|
},
|
|
{
|
|
"description": "The referenced source object is a sibling of the target object.",
|
|
"format": [
|
|
"foaf"
|
|
],
|
|
"name": "sibling-of"
|
|
},
|
|
{
|
|
"description": "The referenced source object is a grandchild of the target object.",
|
|
"format": [
|
|
"foaf"
|
|
],
|
|
"name": "grandchild-of"
|
|
},
|
|
{
|
|
"description": "The referenced source object is a spouse of the target object.",
|
|
"format": [
|
|
"foaf"
|
|
],
|
|
"name": "spouse-of"
|
|
},
|
|
{
|
|
"description": "The referenced source object is an enemy of the target object.",
|
|
"format": [
|
|
"foaf"
|
|
],
|
|
"name": "enemy-of"
|
|
},
|
|
{
|
|
"description": "The referenced source object is an antagonist of the target object.",
|
|
"format": [
|
|
"foaf"
|
|
],
|
|
"name": "antagonist-of"
|
|
},
|
|
{
|
|
"description": "The referenced source object is an ambivalent of the target object.",
|
|
"format": [
|
|
"foaf"
|
|
],
|
|
"name": "ambivalient-of"
|
|
},
|
|
{
|
|
"description": "The referenced source object is a translation of the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "is-a-translation-of"
|
|
},
|
|
{
|
|
"description": "The referenced source object has met with the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "has-met"
|
|
},
|
|
{
|
|
"description": "The referenced source object submitted the referenced target object (to an online anti virus scanner).",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "submitted",
|
|
"opposite": "submitted-by"
|
|
},
|
|
{
|
|
"description": "The referenced source object was submitted (to an online anti virus scanner) by the referenced target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "submitted-by",
|
|
"opposite": "submitted"
|
|
},
|
|
{
|
|
"description": "This relationship describes that the source object does not target the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "does-not-target"
|
|
},
|
|
{
|
|
"description": "This relationship describes that the source object is targeted by the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "is-targeted-by"
|
|
},
|
|
{
|
|
"description": "This relationship describes that the source object is not targeted by the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "is-not-targeted-by"
|
|
},
|
|
{
|
|
"description": "This relationship describes that the source object provides services described in the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "serves"
|
|
},
|
|
{
|
|
"description": "The source object considers the target object as a friend. Is not necessarily symmetric.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Friend"
|
|
},
|
|
{
|
|
"description": "The source object considers the target object as a acquaintance. Is not necessarily symmetric.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Acquaintance"
|
|
},
|
|
{
|
|
"description": "The source object have information to contact and/or get in touch with the target object.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Contact"
|
|
},
|
|
{
|
|
"description": "The source object have physically met the target object.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Met"
|
|
},
|
|
{
|
|
"description": "The source object shares an employer with the target object. This relationship is not geographically limited.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Co-worker"
|
|
},
|
|
{
|
|
"description": "The source object regards the target object as a peer, someone who they feel is on their level and has skills and interests similar to their own. A colleague does not have to be a co-worker, although of course can be.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Colleague"
|
|
},
|
|
{
|
|
"description": "The source object is co-resident with the target object, which means they share a street address with the target object. Co-resident is symmetric.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Co-resident"
|
|
},
|
|
{
|
|
"description": "The source object is neighbor with the target object. This is not limited to next door neighbor.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Neighbor"
|
|
},
|
|
{
|
|
"description": "The target object is the child of the source object.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Child"
|
|
},
|
|
{
|
|
"description": "The target object is the parent of the source object.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Parent"
|
|
},
|
|
{
|
|
"description": "The source object share a parent with the target object. Brothers, sisters, half-brothers, and half-sisters are all examples of siblings.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Sibling"
|
|
},
|
|
{
|
|
"description": "The source object is -or feels themself to be- married, whether legally or not, to the target object.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Spouse"
|
|
},
|
|
{
|
|
"description": "The target object is a relative of the source object.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Kin"
|
|
},
|
|
{
|
|
"description": "The source object is inspired in some way by the target object.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Muse"
|
|
},
|
|
{
|
|
"description": "The source object is attracted -romantically speaking- to the target object.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Crush"
|
|
},
|
|
{
|
|
"description": "The source object is dating the target object.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Date"
|
|
},
|
|
{
|
|
"description": "The source object is intimate, whether physically or emotionally, with the target object.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Sweetheart"
|
|
},
|
|
{
|
|
"description": "The source object refers to the target object as themself or a representation of themself. Can be a profile on social-networking for example. This value is exclusive of all other XFN values.",
|
|
"format": [
|
|
"XFN"
|
|
],
|
|
"name": "Me"
|
|
},
|
|
{
|
|
"description": "The source object is redirected to the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "redirects-to"
|
|
},
|
|
{
|
|
"description": "The source object is rendered to the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "rendered-as"
|
|
},
|
|
{
|
|
"description": "The source object is known as the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "known-as"
|
|
},
|
|
{
|
|
"description": "The source object is led to the target object.",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "led-to"
|
|
},
|
|
{
|
|
"description": "The source object has an impact on the target.",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "impacts",
|
|
"opposite": "impacted-by"
|
|
},
|
|
{
|
|
"description": "The source object is impacted by the target.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "impacted-by",
|
|
"opposite": "impacts"
|
|
},
|
|
{
|
|
"description": "An object occured at a specific location.",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "located-at"
|
|
},
|
|
{
|
|
"description": "The source object should be considered a point of contact for the target.",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "contact-for"
|
|
},
|
|
{
|
|
"description": "The source object was responsible for detecting the target object.",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "detects",
|
|
"opposite": "detected-by"
|
|
},
|
|
{
|
|
"description": "The source object is detected by the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "detected-by",
|
|
"opposite": "detects"
|
|
},
|
|
{
|
|
"description": "The target object was observed as part of a source event.",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "observed",
|
|
"opposite": "observed-by"
|
|
},
|
|
{
|
|
"description": "The source object was observed by the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "observed-by",
|
|
"opposite": "observed"
|
|
},
|
|
{
|
|
"description": "The source object is based on the target.",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "based-on"
|
|
},
|
|
{
|
|
"description": "The source object performed the target event.",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "performed",
|
|
"opposite": "performed-by"
|
|
},
|
|
{
|
|
"description": "The source object was performed by the target.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "performed-by",
|
|
"opposite": "performed"
|
|
},
|
|
{
|
|
"description": "The source object blocks the target object.",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "blocks",
|
|
"opposite": "blocked-by"
|
|
},
|
|
{
|
|
"description": "The source object is blocked by the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "blocked-by",
|
|
"opposite": "blocks"
|
|
},
|
|
{
|
|
"description": "The source object causes the target event.",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "causes",
|
|
"opposite": "caused-by"
|
|
},
|
|
{
|
|
"description": "The source object is caused by the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "caused-by",
|
|
"opposite": "causes"
|
|
},
|
|
{
|
|
"description": "The source object is followed by the target because of an error.",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "errored-to"
|
|
},
|
|
{
|
|
"description": "The source object has been assigned the target.",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "assigned"
|
|
},
|
|
{
|
|
"description": "The source object participated in the target task.",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "participated-in"
|
|
},
|
|
{
|
|
"description": "The source object is targeted by the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "targeted-by",
|
|
"opposite": "targets"
|
|
},
|
|
{
|
|
"description": "The source object was created by the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "created-by",
|
|
"opposite": "creates"
|
|
},
|
|
{
|
|
"description": "The source object is the sample of the target object.",
|
|
"format": [
|
|
"stix-2.1"
|
|
],
|
|
"name": "sample-of"
|
|
},
|
|
{
|
|
"description": "This relationship describes an object which is allied with another object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "is-allied-with "
|
|
},
|
|
{
|
|
"description": "The source object acquires the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "acquires",
|
|
"opposite": "is-acquired-by"
|
|
},
|
|
{
|
|
"description": "The source object is acquired by the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "is-acquired-by",
|
|
"opposite": "acquires"
|
|
},
|
|
{
|
|
"description": "The source object supports the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "supports",
|
|
"opposite": "supported-by"
|
|
},
|
|
{
|
|
"description": "The source object is supported by the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "supported-by",
|
|
"opposite": "supports"
|
|
},
|
|
{
|
|
"description": "The source object sponsors the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "sponsors",
|
|
"opposite": "sponsored-by"
|
|
},
|
|
{
|
|
"description": "The source object is sponsored by the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "sponsored-by",
|
|
"opposite": "sponsors"
|
|
},
|
|
{
|
|
"description": "The source object operates from the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "operates-from"
|
|
},
|
|
{
|
|
"description": "The source object deploys the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "deploys",
|
|
"opposite": "is-deployed-by"
|
|
},
|
|
{
|
|
"description": "The source object is deployed by the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "is-deployed-by",
|
|
"opposite": "deploys"
|
|
},
|
|
{
|
|
"description": "The source object interacts with the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "interacts-with"
|
|
},
|
|
{
|
|
"description": "The source object injects the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "injects",
|
|
"opposite": "is-injected-by"
|
|
},
|
|
{
|
|
"description": "The source object is injected by the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "is-injected-by",
|
|
"opposite": "injects"
|
|
},
|
|
{
|
|
"description": "The source object interviews the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "interviews",
|
|
"opposite": "is-interviewed-by"
|
|
},
|
|
{
|
|
"description": "The source object is interviewed by the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "is-interviewed-by",
|
|
"opposite": "interviews"
|
|
},
|
|
{
|
|
"description": "The source object summarizes the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "summarizes",
|
|
"opposite": "summarized-by"
|
|
},
|
|
{
|
|
"description": "The source object is summarized by the target object.",
|
|
"format": [
|
|
"misp"
|
|
],
|
|
"name": "summarized-by",
|
|
"opposite": "summarizes"
|
|
}
|
|
],
|
|
"version": 49
|
|
} |