mirror of https://github.com/MISP/misp-objects
69 lines
1.9 KiB
JSON
69 lines
1.9 KiB
JSON
{
|
|
"attributes": {
|
|
"first-seen": {
|
|
"description": "When the paste has been accessible or seen for the first time.",
|
|
"disable_correlation": true,
|
|
"misp-attribute": "datetime",
|
|
"ui-priority": 0
|
|
},
|
|
"last-seen": {
|
|
"description": "When the paste has been accessible or seen for the last time.",
|
|
"disable_correlation": true,
|
|
"misp-attribute": "datetime",
|
|
"ui-priority": 0
|
|
},
|
|
"link": {
|
|
"description": "Link to the original source of the source or post (when used legitimately for OSINT source or alike).",
|
|
"misp-attribute": "link",
|
|
"ui-priority": 0
|
|
},
|
|
"origin": {
|
|
"description": "Original source of the paste or post.",
|
|
"disable_correlation": true,
|
|
"misp-attribute": "text",
|
|
"ui-priority": 0,
|
|
"values_list": [
|
|
"pastebin.com",
|
|
"pastebin.com_pro",
|
|
"pastie.org",
|
|
"slexy.org",
|
|
"gist.github.com",
|
|
"codepad.org",
|
|
"safebin.net",
|
|
"hastebin.com",
|
|
"ghostbin.com",
|
|
"paste.ee",
|
|
"0bin.net"
|
|
]
|
|
},
|
|
"paste": {
|
|
"description": "Raw text of the paste or post",
|
|
"misp-attribute": "text",
|
|
"ui-priority": 1
|
|
},
|
|
"title": {
|
|
"description": "Title of the paste or post.",
|
|
"misp-attribute": "text",
|
|
"ui-priority": 0
|
|
},
|
|
"url": {
|
|
"description": "Link to the original source of the paste or post (when used maliciously).",
|
|
"misp-attribute": "url",
|
|
"ui-priority": 0
|
|
},
|
|
"username": {
|
|
"description": "User who posted the post.",
|
|
"misp-attribute": "text",
|
|
"ui-priority": 0
|
|
}
|
|
},
|
|
"description": "Paste or similar post from a website allowing to share privately or publicly posts.",
|
|
"meta-category": "misc",
|
|
"name": "paste",
|
|
"requiredOneOf": [
|
|
"origin",
|
|
"paste"
|
|
],
|
|
"uuid": "cedc055c-78aa-49a4-bfd7-4cc30cecef12",
|
|
"version": 5
|
|
} |