misp-objects/objects/cortex/definition.json

52 lines
1.4 KiB
JSON

{
"attributes": {
"full": {
"description": "Cortex report object (full report) in JSON",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 0
},
"name": {
"description": "Cortex analyser/worker name",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 0
},
"server-name": {
"description": "Name of the cortex server",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 0
},
"start-date": {
"description": "When the Cortex analyser was started",
"disable_correlation": true,
"misp-attribute": "datetime",
"ui-priority": 0
},
"success": {
"description": "Result of the cortex job",
"disable_correlation": true,
"misp-attribute": "boolean",
"sane_default": [
"True",
"False"
],
"ui-priority": 0
},
"summary": {
"description": "Cortex summary object (summary) in JSON",
"disable_correlation": false,
"misp-attribute": "text",
"ui-priority": 0
}
},
"description": "Cortex object describing a complete cortex analysis. Observables would be attribute with a relationship from this object.",
"meta-category": "misc",
"name": "cortex",
"requiredOneOf": [
"full"
],
"uuid": "144988f3-fa00-4374-8015-c1a32092f451",
"version": 2
}