mirror of https://github.com/MISP/misp-objects
70 lines
1.9 KiB
JSON
70 lines
1.9 KiB
JSON
{
|
|
"requiredOneOf": [
|
|
"origin",
|
|
"paste"
|
|
],
|
|
"attributes": {
|
|
"paste": {
|
|
"description": "Raw text of the paste or post",
|
|
"ui-priority": 1,
|
|
"misp-attribute": "text"
|
|
},
|
|
"origin": {
|
|
"values_list": [
|
|
"pastebin.com",
|
|
"pastebin.com_pro",
|
|
"pastie.org",
|
|
"slexy.org",
|
|
"gist.github.com",
|
|
"codepad.org",
|
|
"safebin.net",
|
|
"hastebin.com",
|
|
"ghostbin.com",
|
|
"paste.ee",
|
|
"0bin.net"
|
|
],
|
|
"description": "Original source of the paste or post.",
|
|
"ui-priority": 0,
|
|
"misp-attribute": "text",
|
|
"disable_correlation": true
|
|
},
|
|
"title": {
|
|
"misp-attribute": "text",
|
|
"ui-priority": 0,
|
|
"description": "Title of the paste or post."
|
|
},
|
|
"username": {
|
|
"misp-attribute": "text",
|
|
"ui-priority": 0,
|
|
"description": "User who posted the post."
|
|
},
|
|
"url": {
|
|
"misp-attribute": "url",
|
|
"ui-priority": 0,
|
|
"description": "Link to the original source of the paste or post (when used maliciously)."
|
|
},
|
|
"link": {
|
|
"misp-attribute": "link",
|
|
"ui-priority": 0,
|
|
"description": "Link to the original source of the source or post (when used legitimately for OSINT source or alike)."
|
|
},
|
|
"last-seen": {
|
|
"description": "When the paste has been accessible or seen for the last time.",
|
|
"disable_correlation": true,
|
|
"ui-priority": 0,
|
|
"misp-attribute": "datetime"
|
|
},
|
|
"first-seen": {
|
|
"description": "When the paste has been accessible or seen for the first time.",
|
|
"disable_correlation": true,
|
|
"ui-priority": 0,
|
|
"misp-attribute": "datetime"
|
|
}
|
|
},
|
|
"version": 5,
|
|
"description": "Paste or similar post from a website allowing to share privately or publicly posts.",
|
|
"meta-category": "misc",
|
|
"uuid": "cedc055c-78aa-49a4-bfd7-4cc30cecef12",
|
|
"name": "paste"
|
|
}
|