misp-objects/objects/research-scanner/definition.json

80 lines
2.1 KiB
JSON

{
"attributes": {
"asn": {
"description": "Autonomous System Number related to project",
"disable_correlation": true,
"misp-attribute": "AS",
"ui-priority": 0
},
"contact_email": {
"categories": [
"Network activity",
"Social network"
],
"description": "Project contact information",
"disable_correlation": true,
"misp-attribute": "email-dst",
"multiple": true,
"ui-priority": 1
},
"contact_phone": {
"description": "Phone number related to project",
"disable_correlation": true,
"misp-attribute": "phone-number",
"multiple": true,
"ui-priority": 0
},
"domain": {
"description": "Domain related to project",
"misp-attribute": "domain",
"multiple": true,
"ui-priority": 1
},
"project": {
"description": "Description of scanning project",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 1
},
"project_url": {
"description": "URL related to project",
"disable_correlation": true,
"misp-attribute": "link",
"multiple": true,
"ui-priority": 1
},
"scanning_ip": {
"categories": [
"Network activity",
"External analysis"
],
"description": "IP address used by project",
"misp-attribute": "ip-src",
"multiple": true,
"ui-priority": 1
},
"scheduled_end": {
"description": "Scheduled end of scanning activity",
"disable_correlation": true,
"misp-attribute": "datetime",
"multiple": true,
"ui-priority": 0
},
"scheduled_start": {
"description": "Scheduled start of scanning activity",
"disable_correlation": true,
"misp-attribute": "datetime",
"multiple": true,
"ui-priority": 1
}
},
"description": "Information related to known scanning activity (e.g. from research projects)",
"meta-category": "network",
"name": "research-scanner",
"required": [
"project",
"scanning_ip"
],
"uuid": "d690e956-fc8a-11e8-8eb2-f2801f1b9fd1",
"version": 20190102
}