From 074abd12adb91242696df6a6e4da553c438aedda Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Thu, 24 Dec 2020 11:58:32 +0100 Subject: [PATCH] chg: [type] favicon-mmh3 is the murmur3 hash of a favicon as used in Shodan. --- _pages/datamodels.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/_pages/datamodels.md b/_pages/datamodels.md index 361026c..473a61d 100755 --- a/_pages/datamodels.md +++ b/_pages/datamodels.md @@ -63,6 +63,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/ |email-thread-index| | | | | | | |email-x-mailer| | | | | | | |eppn| | | | | | | +|favicon-mmh3| | | | | | | |filename| | X | | X | | | |filename|authentihash| | X | | | | | |filename|impfuzzy| | X | | | | | @@ -248,6 +249,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/ |email-thread-index| | | X | | | | |email-x-mailer| | | X | | | | |eppn| X | | | | | | +|favicon-mmh3| X | | | | | | |filename| | | X | X | | X | |filename|authentihash| | | X | X | | | |filename|impfuzzy| | | X | X | | | @@ -433,6 +435,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/ |email-thread-index| | | | | |email-x-mailer| | | | | |eppn| | X | | | +|favicon-mmh3| | | | | |filename| | | | | |filename|authentihash| | | | | |filename|impfuzzy| | | | | @@ -638,6 +641,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/ * **email-thread-index**: The email thread index header * **email-x-mailer**: Email x-mailer header * **eppn**: eduPersonPrincipalName - eppn - the NetId of the person for the purposes of inter-institutional authentication. Should be stored in the form of user@univ.edu, where univ.edu is the name of the local security domain. +* **favicon-mmh3**: favicon-mmh3 is the murmur3 hash of a favicon as used in Shodan. * **filename**: Filename * **filename|authentihash**: A checksum in md5 format * **filename|impfuzzy**: Import fuzzy hash - a fuzzy hash created based on the imports in the sample.