mirror of https://github.com/MISP/misp-rfc
chg: [core] export updated
parent
b48ed9dc9c
commit
051e33b671
|
@ -1848,7 +1848,7 @@ represented as an unsigned integer.<a href="#section-2.3.2.2-1" class="pilcrow">
|
|||
</dd>
|
||||
<dd class="break"></dd>
|
||||
<dt id="section-2.3.2.3-3.13">Network activity</dt>
|
||||
<dd style="margin-left: 1.5em" id="section-2.3.2.3-3.14">ip-src, ip-dst, ip-dst|port, ip-src|port, port, hostname, domain, domain|ip, mac-address, mac-eui-64, email, email-dst, email-src, eppn, url, uri, user-agent, http-method, AS, snort, pattern-in-file, filename-pattern, stix2-pattern, pattern-in-traffic, attachment, comment, text, x509-fingerprint-md5, x509-fingerprint-sha1, x509-fingerprint-sha256, ja3-fingerprint-md5, jarm-fingerprint, hassh-md5, hasshserver-md5, other, hex, cookie, hostname|port, bro, zeek, anonymised, community-id, email-subject, favicon-mmh3, dkim, dkim-signature<a href="#section-2.3.2.3-3.14" class="pilcrow">¶</a>
|
||||
<dd style="margin-left: 1.5em" id="section-2.3.2.3-3.14">ip-src, ip-dst, ip-dst|port, ip-src|port, port, hostname, domain, domain|ip, mac-address, mac-eui-64, email, email-dst, email-src, eppn, url, uri, user-agent, http-method, AS, snort, pattern-in-file, filename-pattern, stix2-pattern, pattern-in-traffic, attachment, comment, text, x509-fingerprint-md5, x509-fingerprint-sha1, x509-fingerprint-sha256, ja3-fingerprint-md5, jarm-fingerprint, hassh-md5, hasshserver-md5, other, hex, cookie, hostname|port, bro, zeek, anonymised, community-id, email-subject, favicon-mmh3, dkim, dkim-signature, ssh-fingerprint<a href="#section-2.3.2.3-3.14" class="pilcrow">¶</a>
|
||||
</dd>
|
||||
<dd class="break"></dd>
|
||||
<dt id="section-2.3.2.3-3.15">Other</dt>
|
||||
|
@ -2147,7 +2147,7 @@ id is represented as a JSON string. id <span class="bcp14">SHALL</span> be prese
|
|||
</dd>
|
||||
<dd class="break"></dd>
|
||||
<dt id="section-2.4.2.3-3.13">Network activity</dt>
|
||||
<dd style="margin-left: 1.5em" id="section-2.4.2.3-3.14">ip-src, ip-dst, ip-dst|port, ip-src|port, port, hostname, domain, domain|ip, mac-address, mac-eui-64, email, email-dst, email-src, eppn, url, uri, user-agent, http-method, AS, snort, pattern-in-file, filename-pattern, stix2-pattern, pattern-in-traffic, attachment, comment, text, x509-fingerprint-md5, x509-fingerprint-sha1, x509-fingerprint-sha256, ja3-fingerprint-md5, jarm-fingerprint, hassh-md5, hasshserver-md5, other, hex, cookie, hostname|port, bro, zeek, anonymised, community-id, email-subject, favicon-mmh3, dkim, dkim-signature<a href="#section-2.4.2.3-3.14" class="pilcrow">¶</a>
|
||||
<dd style="margin-left: 1.5em" id="section-2.4.2.3-3.14">ip-src, ip-dst, ip-dst|port, ip-src|port, port, hostname, domain, domain|ip, mac-address, mac-eui-64, email, email-dst, email-src, eppn, url, uri, user-agent, http-method, AS, snort, pattern-in-file, filename-pattern, stix2-pattern, pattern-in-traffic, attachment, comment, text, x509-fingerprint-md5, x509-fingerprint-sha1, x509-fingerprint-sha256, ja3-fingerprint-md5, jarm-fingerprint, hassh-md5, hasshserver-md5, other, hex, cookie, hostname|port, bro, zeek, anonymised, community-id, email-subject, favicon-mmh3, dkim, dkim-signature, ssh-fingerprint<a href="#section-2.4.2.3-3.14" class="pilcrow">¶</a>
|
||||
</dd>
|
||||
<dd class="break"></dd>
|
||||
<dt id="section-2.4.2.3-3.15">Other</dt>
|
||||
|
|
|
@ -525,7 +525,7 @@ Internet-Draft MISP core format February 2022
|
|||
fingerprint-sha1, x509-fingerprint-sha256, ja3-fingerprint-md5,
|
||||
jarm-fingerprint, hassh-md5, hasshserver-md5, other, hex, cookie,
|
||||
hostname|port, bro, zeek, anonymised, community-id, email-subject,
|
||||
favicon-mmh3, dkim, dkim-signature
|
||||
favicon-mmh3, dkim, dkim-signature, ssh-fingerprint
|
||||
Other comment, text, other, size-in-bytes, counter, datetime, cpe,
|
||||
port, float, hex, phone-number, boolean, anonymised, pgp-public-
|
||||
key, pgp-private-key
|
||||
|
@ -905,7 +905,7 @@ Internet-Draft MISP core format February 2022
|
|||
fingerprint-sha1, x509-fingerprint-sha256, ja3-fingerprint-md5,
|
||||
jarm-fingerprint, hassh-md5, hasshserver-md5, other, hex, cookie,
|
||||
hostname|port, bro, zeek, anonymised, community-id, email-subject,
|
||||
favicon-mmh3, dkim, dkim-signature
|
||||
favicon-mmh3, dkim, dkim-signature, ssh-fingerprint
|
||||
Other comment, text, other, size-in-bytes, counter, datetime, cpe,
|
||||
port, float, hex, phone-number, boolean, anonymised, pgp-public-
|
||||
key, pgp-private-key
|
||||
|
|
|
@ -274,7 +274,7 @@ represented as an unsigned integer.</t>
|
|||
<dt>Internal reference</dt>
|
||||
<dd>text, link, comment, other, hex, anonymised, git-commit-id</dd>
|
||||
<dt>Network activity</dt>
|
||||
<dd>ip-src, ip-dst, ip-dst|port, ip-src|port, port, hostname, domain, domain|ip, mac-address, mac-eui-64, email, email-dst, email-src, eppn, url, uri, user-agent, http-method, AS, snort, pattern-in-file, filename-pattern, stix2-pattern, pattern-in-traffic, attachment, comment, text, x509-fingerprint-md5, x509-fingerprint-sha1, x509-fingerprint-sha256, ja3-fingerprint-md5, jarm-fingerprint, hassh-md5, hasshserver-md5, other, hex, cookie, hostname|port, bro, zeek, anonymised, community-id, email-subject, favicon-mmh3, dkim, dkim-signature</dd>
|
||||
<dd>ip-src, ip-dst, ip-dst|port, ip-src|port, port, hostname, domain, domain|ip, mac-address, mac-eui-64, email, email-dst, email-src, eppn, url, uri, user-agent, http-method, AS, snort, pattern-in-file, filename-pattern, stix2-pattern, pattern-in-traffic, attachment, comment, text, x509-fingerprint-md5, x509-fingerprint-sha1, x509-fingerprint-sha256, ja3-fingerprint-md5, jarm-fingerprint, hassh-md5, hasshserver-md5, other, hex, cookie, hostname|port, bro, zeek, anonymised, community-id, email-subject, favicon-mmh3, dkim, dkim-signature, ssh-fingerprint</dd>
|
||||
<dt>Other</dt>
|
||||
<dd>comment, text, other, size-in-bytes, counter, datetime, cpe, port, float, hex, phone-number, boolean, anonymised, pgp-public-key, pgp-private-key</dd>
|
||||
<dt>Payload delivery</dt>
|
||||
|
@ -450,7 +450,7 @@ id is represented as a JSON string. id <bcp14>SHALL</bcp14> be present.</t>
|
|||
<dt>Internal reference</dt>
|
||||
<dd>text, link, comment, other, hex, anonymised, git-commit-id</dd>
|
||||
<dt>Network activity</dt>
|
||||
<dd>ip-src, ip-dst, ip-dst|port, ip-src|port, port, hostname, domain, domain|ip, mac-address, mac-eui-64, email, email-dst, email-src, eppn, url, uri, user-agent, http-method, AS, snort, pattern-in-file, filename-pattern, stix2-pattern, pattern-in-traffic, attachment, comment, text, x509-fingerprint-md5, x509-fingerprint-sha1, x509-fingerprint-sha256, ja3-fingerprint-md5, jarm-fingerprint, hassh-md5, hasshserver-md5, other, hex, cookie, hostname|port, bro, zeek, anonymised, community-id, email-subject, favicon-mmh3, dkim, dkim-signature</dd>
|
||||
<dd>ip-src, ip-dst, ip-dst|port, ip-src|port, port, hostname, domain, domain|ip, mac-address, mac-eui-64, email, email-dst, email-src, eppn, url, uri, user-agent, http-method, AS, snort, pattern-in-file, filename-pattern, stix2-pattern, pattern-in-traffic, attachment, comment, text, x509-fingerprint-md5, x509-fingerprint-sha1, x509-fingerprint-sha256, ja3-fingerprint-md5, jarm-fingerprint, hassh-md5, hasshserver-md5, other, hex, cookie, hostname|port, bro, zeek, anonymised, community-id, email-subject, favicon-mmh3, dkim, dkim-signature, ssh-fingerprint</dd>
|
||||
<dt>Other</dt>
|
||||
<dd>comment, text, other, size-in-bytes, counter, datetime, cpe, port, float, hex, phone-number, boolean, anonymised, pgp-public-key, pgp-private-key</dd>
|
||||
<dt>Payload delivery</dt>
|
||||
|
|
Loading…
Reference in New Issue