misp-objects/objects/paste/definition.json

75 lines
2.0 KiB
JSON

{
"attributes": {
"first-seen": {
"description": "When the paste has been accessible or seen for the first time.",
"disable_correlation": true,
"misp-attribute": "datetime",
"ui-priority": 0
},
"last-seen": {
"description": "When the paste has been accessible or seen for the last time.",
"disable_correlation": true,
"misp-attribute": "datetime",
"ui-priority": 0
},
"link": {
"description": "Link to the original source of the source or post (when used legitimately for OSINT source or alike).",
"misp-attribute": "link",
"ui-priority": 0
},
"origin": {
"description": "Original source of the paste or post.",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 0,
"values_list": [
"pastebin.com",
"pastebin.com_pro",
"pastebin.fr",
"pastie.org",
"slexy.org",
"gist.github.com",
"codepad.org",
"safebin.net",
"hastebin.com",
"ghostbin.com",
"paste.ee",
"0bin.net"
]
},
"paste": {
"description": "Raw text of the paste or post",
"misp-attribute": "text",
"ui-priority": 1
},
"paste-file": {
"description": "Content of the paste in file",
"misp-attribute": "attachment",
"ui-priority": 0
},
"title": {
"description": "Title of the paste or post.",
"misp-attribute": "text",
"ui-priority": 0
},
"url": {
"description": "Link to the original source of the paste or post (when used maliciously).",
"misp-attribute": "url",
"ui-priority": 0
},
"username": {
"description": "User who posted the post.",
"misp-attribute": "text",
"ui-priority": 0
}
},
"description": "Paste or similar post from a website allowing to share privately or publicly posts.",
"meta-category": "misc",
"name": "paste",
"requiredOneOf": [
"origin",
"paste"
],
"uuid": "cedc055c-78aa-49a4-bfd7-4cc30cecef12",
"version": 6
}