misp-objects/objects/passive-dns/definition.json

66 lines
1.4 KiB
JSON

{
"name": "passive-dns",
"uuid": "b77b7b1c-66ab-4a41-8da4-83810f6d2d6c",
"meta-category": "network",
"description": "Passive DNS records as expressed in draft-dulaunoy-dnsop-passive-dns-cof-01",
"version": 1,
"attributes": {
"rrtype": {
"misp-attribute": "text",
"misp-usage-frequency": 1,
"categories": [
"Network activity",
"External analysis"
]
},
"rrname": {
"misp-attribute": "hostname",
"misp-usage-frequency": 1,
"categories": [
"Network activity",
"External analysis"
]
},
"time_first": {
"misp-attribute": "datetime",
"misp-usage-frequency": 0
},
"time_last": {
"misp-attribute": "datetime",
"misp-usage-frequency": 0
},
"origin": {
"misp-attribute": "text",
"misp-usage-frequency": 0
},
"count": {
"misp-attribute": "counter",
"misp-usage-frequency": 0
},
"sensor_id": {
"misp-attribute": "text",
"misp-usage-frequency": 0
},
"bailiwick": {
"misp-attribute": "text",
"misp-usage-frequency": 0
},
"zone_time_first": {
"misp-attribute": "datetime",
"misp-usage-frequency": 0
},
"zone_time_last": {
"misp-attribute": "datetime",
"misp-usage-frequency": 0
},
"text": {
"misp-attribute": "text",
"misp-usage-frequency": 0
}
},
"required": [
"rrtype",
"rrname"
]
}