MISP
/
misp-taxonomies
mirror of https://github.com/MISP/misp-taxonomies
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [domain-abuse] include registry and registrar incident

pull/207/head
Alexandre Dulaunoy 2021-05-10 18:16:39 +02:00
parent 68ac8951f5
commit 01fe23ef6b
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
2 changed files with 15 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
MANIFEST.json
View File

@ -189,9 +189,9 @@
"version": 3 "version": 3
}, },
{ {
"description": "Domain Name Abuse - taxonomy to tag domain names used for cybercrime. Use europol-incident to tag abuse-activity", "description": "Domain Name Abuse - taxonomy to tag domain names used for cybercrime.",
"name": "domain-abuse", "name": "domain-abuse",
"version": 1 "version": 2
}, },
{ {
"description": "A taxonomy based on the superclass and class of drugs. Based on https://www.drugbank.ca/releases/latest", "description": "A taxonomy based on the superclass and class of drugs. Based on https://www.drugbank.ca/releases/latest",
@ -615,5 +615,5 @@
} }
], ],
"url": "https://raw.githubusercontent.com/MISP/misp-taxonomies/main/", "url": "https://raw.githubusercontent.com/MISP/misp-taxonomies/main/",
"version": "20210503" "version": "20210510"
} }

14
domain-abuse/machinetag.json
View File

@ -1,8 +1,8 @@
{ {
"namespace": "domain-abuse", "namespace": "domain-abuse",
"expanded": "Domain Name Abuse", "expanded": "Domain Name Abuse",
"description": "Domain Name Abuse - taxonomy to tag domain names used for cybercrime. Use europol-incident to tag abuse-activity", "description": "Domain Name Abuse - taxonomy to tag domain names used for cybercrime.",
"version": 1, "version": 2,
"predicates": [ "predicates": [
{ {
"value": "domain-status", "value": "domain-status",
@ -73,6 +73,16 @@
"value": "sinkhole", "value": "sinkhole",
"expanded": "Sinkhole", "expanded": "Sinkhole",
"description": "Domain Name is sinkholed for research, detection, LE" "description": "Domain Name is sinkholed for research, detection, LE"
},
{
"value": "compromised-domain-name-registrar",
"expanded": "Compromised domain name registrar",
"description": "Domain name is compromised due to an incident at the registrar"
},
{
"value": "compromised-domain-name-registry",
"expanded": "Compromised domain name registry",
"description": "Domain name is compromised due to an incident at the registry"
} }
] ]
} }