mirror of https://github.com/MISP/misp-rfc
add: attribute type whois-registrant-type added
parent
f70d64dd26
commit
63283dbbc5
|
@ -5,7 +5,7 @@
|
||||||
% ipr= "trust200902"
|
% ipr= "trust200902"
|
||||||
% area = "Security"
|
% area = "Security"
|
||||||
%
|
%
|
||||||
% date = 2017-09-20T00:00:00Z
|
% date = 2018-02-09T00:00:00Z
|
||||||
%
|
%
|
||||||
% [[author]]
|
% [[author]]
|
||||||
% initials="A."
|
% initials="A."
|
||||||
|
@ -519,7 +519,7 @@ type is represented as a JSON string. type **MUST** be present and it **MUST** b
|
||||||
: comment, text, other
|
: comment, text, other
|
||||||
|
|
||||||
**Attribution**
|
**Attribution**
|
||||||
: threat-actor, campaign-name, campaign-id, whois-registrant-phone, whois-registrant-email, whois-registrant-name, whois-registrar, whois-creation-date, comment, text, x509-fingerprint-sha1, other
|
: threat-actor, campaign-name, campaign-id, whois-registrant-phone, whois-registrant-email, whois-registrant-name, whois-registrant-org, whois-registrar, whois-creation-date, comment, text, x509-fingerprint-sha1, other
|
||||||
|
|
||||||
**External analysis**
|
**External analysis**
|
||||||
: md5, sha1, sha256, filename, filename|md5, filename|sha1, filename|sha256, ip-src, ip-dst, hostname, domain, domain|ip, url, user-agent, regkey, regkey|value, AS, snort, pattern-in-file, pattern-in-traffic, pattern-in-memory, vulnerability, attachment, malware-sample, link, comment, text, x509-fingerprint-sha1, github-repository, other
|
: md5, sha1, sha256, filename, filename|md5, filename|sha1, filename|sha256, ip-src, ip-dst, hostname, domain, domain|ip, url, user-agent, regkey, regkey|value, AS, snort, pattern-in-file, pattern-in-traffic, pattern-in-memory, vulnerability, attachment, malware-sample, link, comment, text, x509-fingerprint-sha1, github-repository, other
|
||||||
|
|
Loading…
Reference in New Issue