misp-objects/objects/ddos-claim/definition.json

51 lines
1.4 KiB
JSON

{
"attributes": {
"claim-validity": {
"description": "Validity of the claim. Valid means, a trusted entity having the technical capabilities to perform analysis confirmed the detection of DDoS activities.",
"disable_correlation": true,
"misp-attribute": "text",
"sane_default": [
"Unknown",
"Valid",
"Invalid"
],
"ui-priority": 0
},
"proof": {
"description": "The claim in text format.",
"disable_correlation": true,
"misp-attribute": "text",
"multiple": true,
"ui-priority": 0
},
"proof-screenshot": {
"description": "Screenshot of the claim.",
"misp-attribute": "attachment",
"multiple": true,
"ui-priority": 0
},
"reference": {
"description": "Reference to the DDoS claim.",
"disable_correlation": true,
"misp-attribute": "link",
"multiple": true,
"ui-priority": 0
},
"target": {
"description": "Target of the DDoS claim.",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 0
}
},
"description": "DDoS-claim object describes a current claim of DDoS activity.",
"meta-category": "network",
"name": "ddos-claim",
"requiredOneOf": [
"target",
"proof",
"reference"
],
"uuid": "2722ac76-1f1f-43b7-bc68-ba5465ec5c04",
"version": 2
}