misp-objects/objects/whois/definition.json

52 lines
1.1 KiB
JSON

{
"requiredOneOf": [
"registrant-email",
"registrant-phone",
"creation-date",
"registrant-name",
"registar"
],
"required": [
"domain"
],
"attributes": {
"text": {
"ui-frequency": 1,
"misp-attribute": "text"
},
"registar": {
"ui-frequency": 0,
"misp-attribute": "whois-registar"
},
"registrant-name": {
"ui-frequency": 0,
"misp-attribute": "whois-registrant-name"
},
"registrant-phone": {
"ui-frequency": 0,
"misp-attribute": "whois-registrant-phone"
},
"registrant-email": {
"ui-frequency": 1,
"misp-attribute": "whois-registrant-email"
},
"creation-date": {
"ui-frequency": 0,
"misp-attribute": "datetime"
},
"domain": {
"categories": [
"Network activity",
"External analysis"
],
"ui-frequency": 1,
"misp-attribute": "domain"
}
},
"version": 1,
"description": "Whois records information for a domain name.",
"meta-category": "network",
"uuid": "429faea1-34ff-47af-8a00-7c62d3be5a6a",
"name": "whois"
}