MISP
/
misp-website
mirror of https://github.com/MISP/misp-website
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [datamodels] telfhash added

pull/30/head
Alexandre Dulaunoy 2020-10-13 22:32:27 +02:00
parent 2c8d95009a
commit 10c0dd0dfe
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
_pages/datamodels.md
View File

@ -171,6 +171,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
|target-machine| | | | | | | |target-machine| | | | | | |
|target-org| | | | | | | |target-org| | | | | | |
|target-user| | | | | | | |target-user| | | | | | |
|telfhash| | X | | | | |
|text| X | X | X | X | X | X | |text| X | X | X | X | X | X |
|threat-actor| | | X | | | | |threat-actor| | | X | | | |
|tlsh| | | | | | | |tlsh| | | | | | |
@ -353,6 +354,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
|target-machine| | | | | | | |target-machine| | | | | | |
|target-org| | | | | | | |target-org| | | | | | |
|target-user| | | | | | | |target-user| | | | | | |
|telfhash| | | X | X | | |
|text| X | X | X | X | X | X | |text| X | X | X | X | X | X |
|threat-actor| | | | | | | |threat-actor| | | | | | |
|tlsh| | | X | X | | | |tlsh| | | X | X | | |
@ -535,6 +537,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
|target-machine| | | | X | |target-machine| | | | X |
|target-org| | | | X | |target-org| | | | X |
|target-user| | | | X | |target-user| | | | X |
|telfhash| | | | |
|text| X | X | X | | |text| X | X | X | |
|threat-actor| | | | | |threat-actor| | | | |
|tlsh| | | | | |tlsh| | | | |
@ -737,6 +740,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
* **target-machine**: Attack Targets Machine Name(s) * **target-machine**: Attack Targets Machine Name(s)
* **target-org**: Attack Targets Department or Organization(s) * **target-org**: Attack Targets Department or Organization(s)
* **target-user**: Attack Targets Username(s) * **target-user**: Attack Targets Username(s)
* **telfhash**: telfhash is symbol hash for ELF files, just like imphash is imports hash for PE files.
* **text**: Name, ID or a reference * **text**: Name, ID or a reference
* **threat-actor**: A string identifying the threat actor * **threat-actor**: A string identifying the threat actor
* **tlsh**: A checksum in the Trend Micro Locality Sensitive Hash format * **tlsh**: A checksum in the Trend Micro Locality Sensitive Hash format