mirror of https://github.com/MISP/misp-objects
59 lines
1.9 KiB
JSON
59 lines
1.9 KiB
JSON
{
|
|
"attributes": {
|
|
"extra": {
|
|
"description": "All anecdotal information of the report, which cannot be parsed into the data harmonization elements. E.g. subject of mails, etc. This is data is not automatically propagated to the events.",
|
|
"misp-attribute": "text",
|
|
"ui-priority": 1
|
|
},
|
|
"feed.accuracy": {
|
|
"description": "A float between 0 and 100 that represents how accurate the data in the feed is",
|
|
"misp-attribute": "float",
|
|
"ui-priority": 1
|
|
},
|
|
"feed.code": {
|
|
"description": "Code name for the feed, e.g. DFGS, HSDAG etc.",
|
|
"misp-attribute": "text",
|
|
"ui-priority": 1
|
|
},
|
|
"feed.documentation": {
|
|
"description": "A URL or hint where to find the documentation of this feed.",
|
|
"misp-attribute": "text",
|
|
"ui-priority": 1
|
|
},
|
|
"feed.name": {
|
|
"description": "Name for the feed, usually found in collector bot configuration.",
|
|
"misp-attribute": "text",
|
|
"ui-priority": 1
|
|
},
|
|
"feed.provider": {
|
|
"description": "Name for the provider of the feed, usually found in collector bot configuration.",
|
|
"misp-attribute": "text",
|
|
"ui-priority": 1
|
|
},
|
|
"feed.url": {
|
|
"description": "The URL of a given abuse feed, where applicable",
|
|
"misp-attribute": "url",
|
|
"ui-priority": 1
|
|
},
|
|
"raw": {
|
|
"description": "The original raw and unparsed data encoded in base64.",
|
|
"misp-attribute": "text",
|
|
"ui-priority": 1
|
|
},
|
|
"rtir_id": {
|
|
"description": "Request Tracker Incident Response ticket id.",
|
|
"misp-attribute": "counter",
|
|
"ui-priority": 1
|
|
},
|
|
"time.observation": {
|
|
"description": "The time the collector of the local instance processed (observed) the event.",
|
|
"misp-attribute": "datetime",
|
|
"ui-priority": 1
|
|
}
|
|
},
|
|
"description": "IntelMQ Report",
|
|
"meta-category": "network",
|
|
"name": "intelmq_report",
|
|
"uuid": "c3d34be1-904b-455b-bceb-509418392110",
|
|
"version": 3
|
|
} |