MISP
/
misp-website
mirror of https://github.com/MISP/misp-website
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [type] favicon-mmh3 is the murmur3 hash of a favicon as used in Shodan.

pull/35/head
Alexandre Dulaunoy 2020-12-24 11:58:32 +01:00
parent 4288cea5e2
commit 074abd12ad
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
_pages/datamodels.md
View File

@ -63,6 +63,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
|email-thread-index| | | | | | | |email-thread-index| | | | | | |
|email-x-mailer| | | | | | | |email-x-mailer| | | | | | |
|eppn| | | | | | | |eppn| | | | | | |
|favicon-mmh3| | | | | | |
|filename| | X | | X | | | |filename| | X | | X | | |
|filename|authentihash| | X | | | | | |filename|authentihash| | X | | | | |
|filename|impfuzzy| | X | | | | | |filename|impfuzzy| | X | | | | |
@ -248,6 +249,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
|email-thread-index| | | X | | | | |email-thread-index| | | X | | | |
|email-x-mailer| | | X | | | | |email-x-mailer| | | X | | | |
|eppn| X | | | | | | |eppn| X | | | | | |
|favicon-mmh3| X | | | | | |
|filename| | | X | X | | X | |filename| | | X | X | | X |
|filename|authentihash| | | X | X | | | |filename|authentihash| | | X | X | | |
|filename|impfuzzy| | | X | X | | | |filename|impfuzzy| | | X | X | | |
@ -433,6 +435,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
|email-thread-index| | | | | |email-thread-index| | | | |
|email-x-mailer| | | | | |email-x-mailer| | | | |
|eppn| | X | | | |eppn| | X | | |
|favicon-mmh3| | | | |
|filename| | | | | |filename| | | | |
|filename|authentihash| | | | | |filename|authentihash| | | | |
|filename|impfuzzy| | | | | |filename|impfuzzy| | | | |
@ -638,6 +641,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
* **email-thread-index**: The email thread index header * **email-thread-index**: The email thread index header
* **email-x-mailer**: Email x-mailer header * **email-x-mailer**: Email x-mailer header
* **eppn**: eduPersonPrincipalName - eppn - the NetId of the person for the purposes of inter-institutional authentication. Should be stored in the form of user@univ.edu, where univ.edu is the name of the local security domain. * **eppn**: eduPersonPrincipalName - eppn - the NetId of the person for the purposes of inter-institutional authentication. Should be stored in the form of user@univ.edu, where univ.edu is the name of the local security domain.
* **favicon-mmh3**: favicon-mmh3 is the murmur3 hash of a favicon as used in Shodan.
* **filename**: Filename * **filename**: Filename
* **filename|authentihash**: A checksum in md5 format * **filename|authentihash**: A checksum in md5 format
* **filename|impfuzzy**: Import fuzzy hash - a fuzzy hash created based on the imports in the sample. * **filename|impfuzzy**: Import fuzzy hash - a fuzzy hash created based on the imports in the sample.