misp-objects/objects
Christian Studer 8327157331
Merge branch 'main' of github.com:MISP/misp-objects
2024-10-17 10:15:18 +02:00
..
ADS chg: [ADS] updated 2024-08-22 10:56:11 +02:00
abuseipdb fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
ai-chat-prompt fix: [ai-chat-prompt] improved ai-chat-prompt template 2023-04-16 10:50:30 +02:00
ail-leak
ais fix: forgot to jq all the things. 2023-03-01 15:13:39 +01:00
ais-info
android-app
android-permission
annotation
anonymisation
apivoid-email-verification
artifact chg: [artifact] Changed the `payload_bin` attribute to attachment type 2024-01-19 23:15:41 +01:00
asn fix: [objects description] ref #384 - Grammar fixes included in the JSON files. 2023-02-02 10:51:32 +01:00
attack-pattern
attack-step [attack-step] Fixed typo, added multiples. 2023-11-10 15:18:48 +01:00
attacker-infra new: [attacker-infra] added for the MISP-LEA project 2024-09-19 15:32:29 +02:00
authentication-failure-report
authenticode-signerinfo
av-signature
availability-impact wip: [impacts] New template for different types of impacts as described in STIX 2.1 Incident object extensions 2023-06-22 15:16:48 +02:00
bank-account
bgp-hijack
bgp-ranking
blog
boleto
btc-transaction
btc-wallet fix: [objects description] ref #384 - Grammar fixes included in the JSON files. 2023-02-02 10:51:32 +01:00
c2-list reorder elements 2023-09-19 17:05:06 +02:00
cap-alert
cap-info
cap-resource
cert-pl-phishing chg: [cert-pl-phishing] fixed 2024-04-04 16:53:46 +02:00
cloth test 2022-03-21 10:08:36 +00:00
coin-address chg: [coin-address] add a generic crypto address if the address format 2023-09-28 10:06:02 +02:00
command
command-line chg: [command-line] added sane_default 2024-03-16 09:48:29 +01:00
concordia-mtmf-intrusion-set fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
confidentiality-impact fix: [impacts] Typo 2023-06-22 15:50:54 +02:00
cookie chg: [cookie] cookie can be also only a key or a value 2023-06-14 17:36:22 +02:00
cortex fix: [objects description] ref #384 - Grammar fixes included in the JSON files. 2023-02-02 10:51:32 +01:00
cortex-taxonomy fix: [objects description] ref #384 - Grammar fixes included in the JSON files. 2023-02-02 10:51:32 +01:00
course-of-action
covid19-csse-daily-report fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
covid19-dxy-live-city
covid19-dxy-live-province
cowrie
cpe-asset
credential
credit-card
crowdsec-ip-context feat(crowdsec): Add attributes to crowdsec-ip-context object 2024-08-23 11:24:15 +09:00
crowdstrike-report fix: [crowdstrike-report] jq all the things 2023-11-21 08:20:35 +01:00
crypto-material
cryptocurrency-transaction chg: [cryptocurrency-transaction] fix the UUID 2023-09-28 10:18:32 +02:00
cs-beacon-config chg: [cs-beacon-config] encoded-data as file attachment instead of text 2024-05-07 09:36:13 +02:00
ctf-challenge fix: [ctf-challenge] JSON jqed 2024-09-20 06:31:54 +02:00
cytomic-orion-file
cytomic-orion-machine
dark-pattern-item
ddos fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
ddos-claim fix: [ddos-claim] descriptions fixed following CERT-SE feedback 2024-06-18 09:52:57 +02:00
ddos-config chg: [ddos-config] as the config is mainly describing targets 2024-07-18 15:10:13 +02:00
device
diameter-attack chg: [diameter-attack] jq all the things 2024-10-02 22:10:03 +02:00
diamond fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
directory add: [directory] New object template for directories 2023-02-27 10:56:31 +01:00
dkim
dns-record
dom-hash fix: [dom-hash] category fixed 2024-10-16 18:07:35 +02:00
domain-crawled
domain-ip chg: [domain-ip] added the multiple flag back to ports 2022-05-30 18:07:25 +02:00
edr-report
elf
elf-section
email chg: [email] email-body-attachment added 2023-09-11 11:28:39 +02:00
employee add: [employee] Added a `full-name` object_relation for cases when we are not sure which name is the first and the last 2022-03-31 20:21:12 +02:00
error-message
event wip: [event] New object template to describe events that can happen during an incident 2023-06-22 12:28:47 +02:00
exploit Add software impacted by exploit 2024-03-18 14:19:35 +00:00
exploit-poc
external-impact wip: [impacts] New template for different types of impacts as described in STIX 2.1 Incident object extensions 2023-06-22 15:16:48 +02:00
facebook-account
facebook-group fix: [facebook-group] add an optional ID reference to the facebook id 2022-09-09 07:24:05 +02:00
facebook-page
facebook-post
facebook-reaction new: [facebook-reaction] new object to link reaction with facebook posts or alike 2022-09-09 07:21:59 +02:00
facial-composite
fail2ban fix: [fail2ban] incorrect UUID fixed 2022-12-11 12:54:24 +01:00
favicon
file add: [file] Added creation, modification & access time attributes 2023-02-20 19:31:59 +01:00
flowintel-cm-case chg: [flowintel-cm] notes 2024-04-18 14:40:16 +02:00
flowintel-cm-task chg: [flowintel-cm] notes 2024-04-18 14:40:16 +02:00
flowintel-cm-task-note chg: [flowintel-cm] notes 2024-04-18 14:40:16 +02:00
forensic-case
forensic-evidence
forged-document
ftm-Airplane fix: [ftm] missing description fix #363 2022-06-30 17:19:33 +02:00
ftm-Assessment fix: [ftm] missing description fix #363 2022-06-30 17:19:33 +02:00
ftm-Asset fix: [ftm] missing description fix #363 2022-06-30 17:19:33 +02:00
ftm-Associate
ftm-Audio fix: [ftm] missing description fix #363 2022-06-30 17:19:33 +02:00
ftm-BankAccount fix: [ftm] missing description fix #363 2022-06-30 17:19:33 +02:00
ftm-Call chg: [ftm-Call] fixed missing description 2022-06-30 17:12:25 +02:00
ftm-Company
ftm-Contract
ftm-ContractAward
ftm-CourtCase fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-CourtCaseParty fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Debt
ftm-Directorship fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Document fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Documentation fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-EconomicActivity
ftm-Email fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Event fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Family
ftm-Folder fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-HyperText fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Image fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Land fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-LegalEntity
ftm-License
ftm-Membership fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Message fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Organization fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Ownership fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Package fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Page fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Pages fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Passport
ftm-Payment
ftm-Person
ftm-PlainText fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-PublicBody
ftm-RealEstate
ftm-Representation
ftm-Row fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Sanction
ftm-Succession
ftm-Table fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-TaxRoll
ftm-UnknownLink fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-UserAccount fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Vehicle fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Vessel
ftm-Video fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Workbook fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
game-cheat
generalizing-persuasion-framework new: [gpf] Split actors_speaker and settings_competition into more 2024-04-14 07:26:53 +02:00
geolocation
git-vuln-finder
github-user
gitlab-user
google-safe-browsing Added a is-malicious attribute for abuseipdb and added a google-safe-browsing object for the google-safe-browsing expansion module 2023-07-13 09:25:26 -04:00
google-threat-intelligence-report chg: [google-threat-intelligene-report] JSON clean-up 2024-08-06 18:21:05 +02:00
greynoise-ip chg: [greynoise-intelligence] JSON fixed 2023-03-10 15:34:32 +01:00
gtp-attack
hashlookup
hhhash chg: [hhhash] newline fixed 2023-07-10 16:40:22 +02:00
http-request
identity
ilr-impact
ilr-notification-incident fix: [ilr-notification-incident] Typo 2023-09-14 16:58:22 +02:00
image
impersonation
imsi-catcher fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
incident add: [incident] Added the score attribute 2023-07-07 11:36:42 +02:00
infrastructure
instant-message chg: [instant-message] remove newlines 2024-04-24 14:30:19 +02:00
instant-message-group
integrity-impact fix: [impacts] Typo 2023-06-22 15:50:54 +02:00
intel471-vulnerability-intelligence
intelmq_event fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
intelmq_report fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
internal-reference
interpol-notice
intrusion-set add: [intrusion-set] Added `first_seen` & `last_seen` attributes 2023-11-09 12:10:52 +01:00
iot-device
iot-firmware
ip-api-address
ip-port
irc
ja3
ja3s chg: [ja3s] Add domain and hostname attributes 2023-07-20 10:24:42 +03:00
ja4-plus chg: [ja4-plus] jq all the things 2024-06-26 18:15:04 +02:00
jarm
keybase-account
language-content
leaked-document
legal-entity
lnk
macho
macho-section
mactime-timeline-analysis fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
malware fix: [malware] Fixed `is_family` attribute type 2023-08-10 11:39:44 +02:00
malware-analysis add: [malware-analysis] New object template to describe a static or dynamic analysis performed on a malware instance or family 2023-07-25 15:24:39 +02:00
malware-config fix: [malware-config] typo fixed 2023-07-31 11:21:29 +02:00
meme-image
microblog
monetary-impact wip: [impacts] New template for different types of impacts as described in STIX 2.1 Incident object extensions 2023-06-22 15:16:48 +02:00
mutex
narrative
netflow fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
network-connection fix: [network-connection] Using the `size-in-bytes` attribute type for information expressed in bytes 2024-04-11 09:42:06 +02:00
network-profile chg: [network-profile] new-line 2024-08-06 17:57:11 +02:00
network-socket fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
network-traffic chg: [network-traffic] Going for the `protocol` attribute in singular 2024-04-11 12:04:55 +02:00
news-agency
news-media chg: [news-media] add governmental communication and also news agency 2024-04-12 10:22:53 +02:00
open-data-security
organization chg: [organization] add a MISP UUID if present 2024-05-03 22:04:04 +02:00
original-imported-file
paloalto-threat-event fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
parler-account
parler-comment
parler-post
passive-dns
passive-dns-dnsdbflex
passive-ssh add: [passive-ssh] Added `port` attribute 2022-05-06 17:01:13 +02:00
paste
pcap-metadata
pe chg: [pe] Updated `pe` object template 2024-07-24 12:13:50 +02:00
pe-optional-header chg: [pe-optional-header] jq all the things 2024-07-26 16:39:28 +02:00
pe-section
persnona fix: [jq] JSON fixed 2022-12-15 14:39:52 +01:00
person chg: [person/organization] `impersonated` added to the role of person 2024-03-05 08:59:45 +01:00
personification chg: [personification] fixed 2022-03-24 15:42:35 +01:00
pgp-meta
phishing chg: [phishing] add an IP field for phishing website hosted on IP address or where the IP is important for the analytics 2024-06-25 09:11:17 +02:00
phishing-kit
phone
phone-number chg: remove categories and object_relation definitions from phone-number 2024-06-09 22:39:41 +03:00
physical-impact wip: [impacts] New template for different types of impacts as described in STIX 2.1 Incident object extensions 2023-06-22 15:16:48 +02:00
postal-address
probabilistic-data-structure fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
process add: [process] Environment variables attribute 2024-01-30 15:19:54 +01:00
publication
python-etvx-event-log
query chg: [query] add Kusto Query Language (KQL) 2022-06-25 19:20:13 +02:00
r2graphity fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
ransom-negotiation Added fields 2022-05-20 15:53:29 +02:00
ransomware-group-post fix: [ransomware-group-post] added the missing descriptions for `actor-geo-stats-30d` and `actor-total-stats-30d` 2024-04-24 16:47:47 +02:00
reddit-account
reddit-comment
reddit-post
reddit-subreddit
regexp
registry-key chg: [registry-key] jq all the things 2024-04-25 11:20:46 +02:00
registry-key-value add: [registry-key-value] New template to describe registry key values 2023-03-01 20:50:30 +01:00
regripper-NTUser
regripper-sam-hive-single-user
regripper-sam-hive-user-group
regripper-software-hive-BHO
regripper-software-hive-appInit-DLLS
regripper-software-hive-application-paths
regripper-software-hive-applications-installed
regripper-software-hive-command-shell
regripper-software-hive-software-run
regripper-software-hive-userprofile-winlogon
regripper-software-hive-windows-general-info
regripper-system-hive-firewall-configuration
regripper-system-hive-general-configuration
regripper-system-hive-network-information
regripper-system-hive-services-drivers
report fix: [report] typo fixed 2023-12-06 09:32:13 +01:00
research-scanner fix: [research-scanner] version updated 2024-05-27 10:22:53 +02:00
risk-assessment-report new: [risk-assessment-report] New object template Risk assessment report 2023-04-13 10:41:39 +02:00
rogue-dns
rtir
sandbox-report
sb-signature
scan-result fix: [scan-results] JSON and trailing comma ;-) 2023-08-03 10:47:45 +02:00
scheduled-event
scheduled-task chg: [scheduled-task] disable_correlation + clarification 2022-07-08 15:03:27 +02:00
scrippsco2-c13-daily fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
scrippsco2-c13-monthly
scrippsco2-co2-daily fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
scrippsco2-co2-monthly
scrippsco2-o18-daily fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
scrippsco2-o18-monthly
script
security-playbook chg: [security-playbook] JSON fixed 2022-08-25 10:17:48 +02:00
shadowserver-malware-url-report chg: [shadowserver-malware-url-report] resource path added to improve 2023-12-08 15:18:32 +01:00
shadowserver-scan-http-proxy chg: [shadowserver-scan-http-proxy] new template for MISP-LEA project 2024-09-19 15:23:19 +02:00
shell-commands
shodan-report
short-message-service
shortened-link
sigma new: [sigma] a sigma attribute exists in MISP but the object was 2022-08-03 11:44:37 +02:00
sigmf-archive fix: jq all the things 2023-08-03 09:30:58 +02:00
sigmf-expanded-recording fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
sigmf-recording fix: minor fixes 2023-08-03 08:07:47 +02:00
social-media-group
software
spearphishing-attachment jq_all_the_things 2022-08-25 16:03:59 -05:00
spearphishing-link jq_all_the_things 2022-08-25 16:03:59 -05:00
splunk
ss7-attack modified by ./jq_all_the_things.sh 2022-03-21 15:04:26 +01:00
ssh-authorized-keys
stairwell fixed parse error 2024-03-15 14:04:07 -05:00
stix2-pattern
stock chg: [stock] newline fixed 2022-06-18 17:00:13 +02:00
submarine fix: Changed a few attribute types in different template 2024-04-13 12:24:58 +02:00
suricata
target-system
task wip: [task] New object template for tasks as described in STIX 2.1 Incident object extensions 2023-06-22 15:39:02 +02:00
tattoo test 2022-03-21 10:08:36 +00:00
telegram-account
telegram-bot add username field in telegram-bot object 2022-10-13 13:45:52 +02:00
temporal-event
thaicert-group-cards fix: [jq] all 2022-12-22 13:15:10 +01:00
threatgrid-report
timecode
timesketch-timeline
timesketch_message
timestamp
tor-hiddenservice chg: [tor-hiddenservice] Updated template to match the onion lookup API format 2024-10-17 10:12:46 +02:00
tor-node
traceability-impact wip: [impacts] New template for different types of impacts as described in STIX 2.1 Incident object extensions 2023-06-22 15:16:48 +02:00
tracking-id
transaction
translation
transport-ticket chg: [transport-ticket] update to add the type of ticket (e.g. boarding pass versus ticket) 2023-01-27 15:55:08 +01:00
trustar_report
tsk-chats
tsk-web-bookmark
tsk-web-cookie
tsk-web-downloads
tsk-web-history
tsk-web-search-query
twitter-account
twitter-list
twitter-post
typosquatting-finder chg: [typosquatting] jq_all_the_things 2023-01-16 08:45:20 +01:00
typosquatting-finder-result chg: [typosquatting] jq_all_the_things 2023-01-16 08:45:20 +01:00
url
user-account add: [user-account] Added email attribute 2023-10-31 15:49:44 +01:00
user-action chg: [user-action] fixed 2024-09-19 09:15:54 +02:00
vehicle fix: [vehicle] jq all the things 2022-12-30 07:37:54 +01:00
victim chg: [victim] jq and version updated 2024-10-16 18:09:59 +02:00
virustotal-graph
virustotal-report fix: [virustotal-report] bump version 2023-09-01 09:34:08 +02:00
virustotal-submission Fixes wrong category and typo in value list 2022-04-26 15:05:05 +02:00
vulnerability
weakness
whois
windows-service
x-header new: [x-header] new generic X header object for SMTP, HTTP and others 2023-08-07 14:36:24 +02:00
x509
yabin
yara fix: [yara] add a reference link to the YARA object template 2022-08-03 11:46:30 +02:00
youtube-channel
youtube-comment
youtube-playlist
youtube-video