misp-objects/objects/passive-dns/definition.json

66 lines
1.3 KiB
JSON

{
"required": [
"rrtype",
"rrname"
],
"attributes": {
"zone_time_last": {
"ui-priority": 0,
"misp-attribute": "datetime"
},
"text": {
"ui-priority": 0,
"misp-attribute": "text"
},
"count": {
"ui-priority": 0,
"misp-attribute": "counter"
},
"rrname": {
"categories": [
"Network activity",
"External analysis"
],
"ui-priority": 1,
"misp-attribute": "hostname"
},
"rrtype": {
"categories": [
"Network activity",
"External analysis"
],
"ui-priority": 1,
"misp-attribute": "text"
},
"zone_time_first": {
"ui-priority": 0,
"misp-attribute": "datetime"
},
"origin": {
"ui-priority": 0,
"misp-attribute": "text"
},
"time_last": {
"ui-priority": 0,
"misp-attribute": "datetime"
},
"time_first": {
"ui-priority": 0,
"misp-attribute": "datetime"
},
"bailiwick": {
"ui-priority": 0,
"misp-attribute": "text"
},
"sensor_id": {
"ui-priority": 0,
"misp-attribute": "text"
}
},
"version": 1,
"description": "Passive DNS records as expressed in draft-dulaunoy-dnsop-passive-dns-cof-01",
"meta-category": "network",
"uuid": "b77b7b1c-66ab-4a41-8da4-83810f6d2d6c",
"name": "passive-dns"
}