misp-objects/objects
Alexandre Dulaunoy 4da05293d7
fix: [malware-config] typo fixed
2023-07-31 11:21:29 +02:00
..
ADS fix: [jq] JSON fixed 2022-12-15 14:39:52 +01:00
abuseipdb Fixed json formatting 2023-07-13 09:48:12 -04:00
ai-chat-prompt fix: [ai-chat-prompt] improved ai-chat-prompt template 2023-04-16 10:50:30 +02:00
ail-leak
ais fix: forgot to jq all the things. 2023-03-01 15:13:39 +01:00
ais-info
android-app
android-permission
annotation
anonymisation
apivoid-email-verification new: Add apivoid email verification API result object 2022-02-07 17:54:31 +01:00
artifact fix: [objects description] ref #384 - Grammar fixes included in the JSON files. 2023-02-02 10:51:32 +01:00
asn fix: [objects description] ref #384 - Grammar fixes included in the JSON files. 2023-02-02 10:51:32 +01:00
attack-pattern
attack-step chg: Fixed typo in disable_correlation 2022-07-01 16:59:03 +02:00
authentication-failure-report
authenticode-signerinfo chg: Update objects to match lief output for authenticode 2021-01-19 15:38:31 +01:00
av-signature
availability-impact wip: [impacts] New template for different types of impacts as described in STIX 2.1 Incident object extensions 2023-06-22 15:16:48 +02:00
bank-account Add sane default for boolean objects 2021-12-20 20:02:29 +00:00
bgp-hijack
bgp-ranking
blog
boleto
btc-transaction
btc-wallet fix: [objects description] ref #384 - Grammar fixes included in the JSON files. 2023-02-02 10:51:32 +01:00
cap-alert
cap-info
cap-resource
cloth test 2022-03-21 10:08:36 +00:00
coin-address
command
command-line
concordia-mtmf-intrusion-set fix: incorrect entry in CMTMF_ATCKID 2021-12-20 13:17:46 +01:00
confidentiality-impact fix: [impacts] Typo 2023-06-22 15:50:54 +02:00
cookie chg: [cookie] cookie can be also only a key or a value 2023-06-14 17:36:22 +02:00
cortex fix: [objects description] ref #384 - Grammar fixes included in the JSON files. 2023-02-02 10:51:32 +01:00
cortex-taxonomy fix: [objects description] ref #384 - Grammar fixes included in the JSON files. 2023-02-02 10:51:32 +01:00
course-of-action
covid19-csse-daily-report
covid19-dxy-live-city
covid19-dxy-live-province
cowrie
cpe-asset
credential
credit-card
crowdsec-ip-context add: [crowdsec-ip-context] Added the `false-positives` attribute that comes alongside with the `classifications` 2023-05-26 14:17:10 +02:00
crypto-material chg: [crypto-material] add a public field for public cryptographic materials 2020-12-30 14:21:37 +01:00
cs-beacon-config adding cobalt strike beacon config object 2023-05-19 14:07:24 -05:00
cytomic-orion-file
cytomic-orion-machine
dark-pattern-item
ddos chg: [ddos] because newline 2022-03-09 11:06:19 +01:00
device chg: [device] ui-priority added 2021-10-25 16:05:04 +02:00
diameter-attack fix: [JSON] updated 2022-02-03 17:44:17 +01:00
diamond ran jq_all_the_things.sh 2023-06-14 11:54:46 +00:00
directory add: [directory] New object template for directories 2023-02-27 10:56:31 +01:00
dkim fix: [dkim] clean-up 2021-02-25 07:25:09 +01:00
dns-record
domain-crawled
domain-ip chg: [domain-ip] added the multiple flag back to ports 2022-05-30 18:07:25 +02:00
edr-report Ran jq_all_the_things.sh 2021-10-06 20:13:39 +02:00
elf
elf-section
email Ran jq_all_the_things_.sh 2021-11-26 15:37:32 +02:00
employee add: [employee] Added a `full-name` object_relation for cases when we are not sure which name is the first and the last 2022-03-31 20:21:12 +02:00
error-message new: [error-message] new template to create error-message from MISP processing scripts 2022-02-17 16:47:08 +01:00
event wip: [event] New object template to describe events that can happen during an incident 2023-06-22 12:28:47 +02:00
exploit add: [exploit] Added `description` and `title` attributes 2022-10-23 23:11:48 +02:00
exploit-poc
external-impact wip: [impacts] New template for different types of impacts as described in STIX 2.1 Incident object extensions 2023-06-22 15:16:48 +02:00
facebook-account
facebook-group fix: [facebook-group] add an optional ID reference to the facebook id 2022-09-09 07:24:05 +02:00
facebook-page
facebook-post
facebook-reaction new: [facebook-reaction] new object to link reaction with facebook posts or alike 2022-09-09 07:21:59 +02:00
facial-composite
fail2ban fix: [fail2ban] incorrect UUID fixed 2022-12-11 12:54:24 +01:00
favicon chg: [favicon] jq all the things 2020-12-27 16:21:09 +01:00
file add: [file] Added creation, modification & access time attributes 2023-02-20 19:31:59 +01:00
forensic-case
forensic-evidence
forged-document
ftm-Airplane fix: [ftm] missing description fix #363 2022-06-30 17:19:33 +02:00
ftm-Assessment fix: [ftm] missing description fix #363 2022-06-30 17:19:33 +02:00
ftm-Asset fix: [ftm] missing description fix #363 2022-06-30 17:19:33 +02:00
ftm-Associate
ftm-Audio fix: [ftm] missing description fix #363 2022-06-30 17:19:33 +02:00
ftm-BankAccount fix: [ftm] missing description fix #363 2022-06-30 17:19:33 +02:00
ftm-Call chg: [ftm-Call] fixed missing description 2022-06-30 17:12:25 +02:00
ftm-Company fix: [template] missing newlines 2022-01-06 16:52:43 +01:00
ftm-Contract
ftm-ContractAward
ftm-CourtCase fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-CourtCaseParty fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Debt
ftm-Directorship fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Document fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Documentation fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-EconomicActivity
ftm-Email fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Event fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Family
ftm-Folder fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-HyperText fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Image fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Land fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-LegalEntity
ftm-License
ftm-Membership fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Message fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Organization fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Ownership fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Package fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Page fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Pages fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Passport
ftm-Payment
ftm-Person
ftm-PlainText fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-PublicBody
ftm-RealEstate
ftm-Representation
ftm-Row fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Sanction
ftm-Succession
ftm-Table fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-TaxRoll
ftm-UnknownLink fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-UserAccount fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Vehicle fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Vessel
ftm-Video fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
ftm-Workbook fix: [ftm-*] Fixing missing description - #363 2022-06-30 17:43:44 +02:00
game-cheat added cheat types and minor changes 2022-03-15 03:37:26 +01:00
geolocation chg: [geolocation] countrycode added as requested for the VarIOT. 2021-10-25 15:35:23 +02:00
git-vuln-finder
github-user fix: [template] missing newlines 2022-01-06 16:52:43 +01:00
gitlab-user
google-safe-browsing Added a is-malicious attribute for abuseipdb and added a google-safe-browsing object for the google-safe-browsing expansion module 2023-07-13 09:25:26 -04:00
greynoise-ip chg: [greynoise-intelligence] JSON fixed 2023-03-10 15:34:32 +01:00
gtp-attack fix: [JSON] updated 2022-02-03 17:44:17 +01:00
hashlookup chg: [hashlookup] add KnownMalicious field in hashlookup record 2021-09-24 15:33:53 +02:00
hhhash chg: [hhhash] newline fixed 2023-07-10 16:40:22 +02:00
http-request
identity new: [identity] from STIX 2.1 - 4.5 - new object template 2022-01-31 07:45:38 +01:00
ilr-impact
ilr-notification-incident
image
impersonation
imsi-catcher
incident add: [incident] Added the score attribute 2023-07-07 11:36:42 +02:00
infrastructure new: [infrastructure] infrastructure object added (STIX 2.1 - 4.8) 2022-02-14 11:30:09 +01:00
instant-message chg: [instant-message] Jabber and Twitter added + updated required fields 2022-03-17 09:14:39 +01:00
instant-message-group chg: [instan-message-*] add Tox as potential chat application 2022-01-16 16:39:06 +01:00
integrity-impact fix: [impacts] Typo 2023-06-22 15:50:54 +02:00
intel471-vulnerability-intelligence Add sane default for boolean objects 2021-12-20 20:02:29 +00:00
intelmq_event Add sane default for boolean objects 2021-12-20 20:02:29 +00:00
intelmq_report
internal-reference
interpol-notice
intrusion-set new: [intrusion-set] based on the STIX 2.1 definition 2022-09-29 07:32:52 +02:00
iot-device
iot-firmware
ip-api-address
ip-port fix: [ip-port] jq all the things 2022-03-11 10:21:09 +01:00
irc
ja3
ja3s chg: [ja3s] Add domain and hostname attributes 2023-07-20 10:24:42 +03:00
jarm chg: [jarm] jq all the things 2021-01-05 14:49:34 +01:00
keybase-account
language-content new: [language-content] New object template language-content based on 2022-02-15 07:21:58 +01:00
leaked-document
legal-entity
lnk
macho
macho-section
mactime-timeline-analysis fix: [mactim-timeline-analysis] invalid UUID fixed 2022-12-11 13:03:18 +01:00
malware-config fix: [malware-config] typo fixed 2023-07-31 11:21:29 +02:00
meme-image Add sane default for boolean objects 2021-12-20 20:02:29 +00:00
microblog
monetary-impact wip: [impacts] New template for different types of impacts as described in STIX 2.1 Incident object extensions 2023-06-22 15:16:48 +02:00
mutex
narrative
netflow
network-connection fix: [network-connection, network-socket] Bytes count if also better with an S 2023-03-07 23:26:51 +01:00
network-profile chg: [network-element] jq 2021-02-24 06:48:10 +01:00
network-socket add: [network-socket] Added MAC address attributes 2023-03-31 11:30:33 +02:00
news-agency
news-media
open-data-security new: [open-data-security] new object template based on open data 2021-05-17 15:55:23 +02:00
organization fix: [organization] Fixed missing comma 2023-06-15 13:51:08 +02:00
original-imported-file
paloalto-threat-event chg: [paloalto-threat-event] Hungary access to the git repository has been sanctioned 2022-05-11 15:38:24 +02:00
parler-account Add sane default for boolean objects 2021-12-20 20:02:29 +00:00
parler-comment
parler-post Add sane default for boolean objects 2021-12-20 20:02:29 +00:00
passive-dns chg: [passive-dns] jq 2021-05-03 07:20:51 +02:00
passive-dns-dnsdbflex fix: [passive-dns-dnsdbflex] newline 2021-05-26 14:12:10 +02:00
passive-ssh add: [passive-ssh] Added `port` attribute 2022-05-06 17:01:13 +02:00
paste Typo and version number correction + adding a field in twitter-post 2020-12-14 23:01:12 +01:00
pcap-metadata
pe chg: Update objects to match lief output for authenticode 2021-01-19 15:38:31 +01:00
pe-section
persnona fix: [jq] JSON fixed 2022-12-15 14:39:52 +01:00
person fix: [person] add a missing passport-creation date field. 2022-11-19 12:21:16 +01:00
personification chg: [personification] fixed 2022-03-24 15:42:35 +01:00
pgp-meta
phishing chg: [phishing] newline 2021-05-11 15:44:35 +02:00
phishing-kit
phone
physical-impact wip: [impacts] New template for different types of impacts as described in STIX 2.1 Incident object extensions 2023-06-22 15:16:48 +02:00
postal-address chg: add requiredOneOf for postal-address 2021-12-20 14:15:10 +01:00
probabilistic-data-structure chg: [probabilistic-data-structure] updated followng JL feedback 2021-12-29 16:27:26 +01:00
process Add sane default for boolean objects 2021-12-20 20:02:29 +00:00
publication
python-etvx-event-log
query chg: [query] add Kusto Query Language (KQL) 2022-06-25 19:20:13 +02:00
r2graphity
ransom-negotiation Added fields 2022-05-20 15:53:29 +02:00
ransomware-group-post new: [ransomware-group-post] First draft object for ransomlook.io 2023-02-17 10:33:59 +01:00
reddit-account
reddit-comment
reddit-post
reddit-subreddit
regexp chg: [regexp] fixed 2021-02-19 21:56:35 +01:00
registry-key
registry-key-value add: [registry-key-value] New template to describe registry key values 2023-03-01 20:50:30 +01:00
regripper-NTUser Add sane default for boolean objects 2021-12-20 20:02:29 +00:00
regripper-sam-hive-single-user
regripper-sam-hive-user-group
regripper-software-hive-BHO
regripper-software-hive-appInit-DLLS
regripper-software-hive-application-paths
regripper-software-hive-applications-installed
regripper-software-hive-command-shell
regripper-software-hive-software-run
regripper-software-hive-userprofile-winlogon Add sane default for boolean objects 2021-12-20 20:02:29 +00:00
regripper-software-hive-windows-general-info
regripper-system-hive-firewall-configuration Add sane default for boolean objects 2021-12-20 20:02:29 +00:00
regripper-system-hive-general-configuration Add sane default for boolean objects 2021-12-20 20:02:29 +00:00
regripper-system-hive-network-information Add sane default for boolean objects 2021-12-20 20:02:29 +00:00
regripper-system-hive-services-drivers
report chg: [report] add Zotero item types in addition to the default type 2022-06-18 16:10:41 +02:00
research-scanner
risk-assessment-report new: [risk-assessment-report] New object template Risk assessment report 2023-04-13 10:41:39 +02:00
rogue-dns
rtir
sandbox-report
sb-signature
scan-result chg: [scan-results] jq all the things 2023-07-28 22:25:37 +02:00
scheduled-event
scheduled-task chg: [scheduled-task] disable_correlation + clarification 2022-07-08 15:03:27 +02:00
scrippsco2-c13-daily
scrippsco2-c13-monthly
scrippsco2-co2-daily
scrippsco2-co2-monthly
scrippsco2-o18-daily
scrippsco2-o18-monthly
script
security-playbook chg: [security-playbook] JSON fixed 2022-08-25 10:17:48 +02:00
shell-commands
shodan-report
short-message-service
shortened-link
sigma new: [sigma] a sigma attribute exists in MISP but the object was 2022-08-03 11:44:37 +02:00
social-media-group
software new: [software] software template object added based 6.14 (STIX 2.1) 2022-02-14 11:06:53 +01:00
spearphishing-attachment jq_all_the_things 2022-08-25 16:03:59 -05:00
spearphishing-link jq_all_the_things 2022-08-25 16:03:59 -05:00
splunk fix: [splunk] fixed 2021-02-15 15:10:20 +01:00
ss7-attack modified by ./jq_all_the_things.sh 2022-03-21 15:04:26 +01:00
ssh-authorized-keys
stix2-pattern chg: [stix2-pattern] add STIX 2.1 2022-01-14 16:43:01 +01:00
stock chg: [stock] newline fixed 2022-06-18 17:00:13 +02:00
submarine chg: [submarine] fixes and list of types added 2021-11-12 08:39:35 +01:00
suricata
target-system
task wip: [task] New object template for tasks as described in STIX 2.1 Incident object extensions 2023-06-22 15:39:02 +02:00
tattoo test 2022-03-21 10:08:36 +00:00
telegram-account chg: [telegram-account] required attributes 2021-01-26 11:39:22 +01:00
telegram-bot add username field in telegram-bot object 2022-10-13 13:45:52 +02:00
temporal-event fix: [temporal-event] newline issue 2021-12-21 08:15:06 +01:00
thaicert-group-cards fix: [jq] all 2022-12-22 13:15:10 +01:00
threatgrid-report
timecode
timesketch-timeline
timesketch_message
timestamp
tor-hiddenservice
tor-node
traceability-impact wip: [impacts] New template for different types of impacts as described in STIX 2.1 Incident object extensions 2023-06-22 15:16:48 +02:00
tracking-id
transaction
translation
transport-ticket chg: [transport-ticket] update to add the type of ticket (e.g. boarding pass versus ticket) 2023-01-27 15:55:08 +01:00
trustar_report chg: [trustar_report] Updated to add "THREAT_ACTOR" 2021-01-05 09:30:28 +01:00
tsk-chats
tsk-web-bookmark
tsk-web-cookie
tsk-web-downloads
tsk-web-history
tsk-web-search-query chg: [tsk-web-search-query] jq all the things 2021-07-25 09:11:42 +02:00
twitter-account
twitter-list
twitter-post chg: [twitter-post] jq 2020-12-20 10:52:40 +01:00
typosquatting-finder chg: [typosquatting] jq_all_the_things 2023-01-16 08:45:20 +01:00
typosquatting-finder-result chg: [typosquatting] jq_all_the_things 2023-01-16 08:45:20 +01:00
url chg: [url] jq all the things 2021-02-02 11:57:41 +01:00
user-account Add sane default for boolean objects 2021-12-20 20:02:29 +00:00
vehicle fix: [vehicle] jq all the things 2022-12-30 07:37:54 +01:00
victim fix: [victim] format fixed 2023-02-02 10:58:30 +01:00
virustotal-graph
virustotal-report fix: keys order in VT object 2021-02-02 15:31:00 +01:00
virustotal-submission Fixes wrong category and typo in value list 2022-04-26 15:05:05 +02:00
vulnerability
weakness
whois
windows-service new: [windows-service] windows-service object added 2021-02-13 17:01:44 +01:00
x509 Add sane default for boolean objects 2021-12-20 20:02:29 +00:00
yabin
yara fix: [yara] add a reference link to the YARA object template 2022-08-03 11:46:30 +02:00
youtube-channel
youtube-comment
youtube-playlist
youtube-video