Cortex summary object (summary) in JSON
+Cortex object describing a complete cortex analysis. Observables would be attribute with a relationship from this object..
++ + | ++cortex is a MISP object available in JSON format at this location The JSON format can be freely reused in your application or automatically enabled in MISP. + | +
Object attribute | +MISP attribute type | +Description | +Disable correlation | +Multiple | +
---|---|---|---|---|
summary |
+text |
+
+ Cortex summary object (summary) in JSON + |
+
+ + |
+
+ + |
+
full |
+text |
+
+ Cortex report object (full report) in JSON + |
+
+ + |
+
+ + |
+
start-date |
+datetime |
+
+ When the Cortex analyser was started + |
+
+ + |
+
+ + |
+
name |
+text |
+
+ Cortex analyser/worker name + |
+
+ + |
+
+ + |
+
server-name |
+text |
+
+ Name of the cortex server + |
+
+ + |
+
+ + |
+
success |
+boolean |
+
+ Result of the cortex job + |
+
+ + |
+
+ + |
+
Cortex object describing an Cortex Taxonomy (or mini report).
++ + | ++cortex-taxonomy is a MISP object available in JSON format at this location The JSON format can be freely reused in your application or automatically enabled in MISP. + | +
Object attribute | +MISP attribute type | +Description | +Disable correlation | +Multiple | +
---|---|---|---|---|
namespace |
+text |
+
+ Cortex Taxonomy Namespace + |
+
+ + |
+
+ + |
+
predicate |
+text |
+
+ Cortex Taxonomy Predicate + |
+
+ + |
+
+ + |
+
value |
+text |
+
+ Cortex Taxonomy Value + |
+
+ + |
+
+ + |
+
level |
+text |
+
+ Cortex Taxonomy Level ['info', 'safe', 'suspicious', 'malicious'] + |
+
+ + |
+
+ + |
+
cortex_url |
+link |
+
+ URL to the Cortex job + |
+
+ + |
+
+ + |
+
username
text
Username who posted the microblog post
+Username who posted the microblog post (without the @ prefix)
@@ -10191,6 +10417,32 @@ person is a MISP object available in JSON format at
birth-certificate-number
text
Birth Certificate Number
++
+
ofac-identification-number
text
ofac-identification Number
++
+
nationality
nationality
A timesketch message entry..
++ + | ++timesketch_message is a MISP object available in JSON format at this location The JSON format can be freely reused in your application or automatically enabled in MISP. + | +
Object attribute | +MISP attribute type | +Description | +Disable correlation | +Multiple | +
---|---|---|---|---|
datetime |
+datetime |
+
+ datetime of the message + |
+
+ + |
+
+ + |
+
message |
+text |
+
+ message + |
+
+ + |
+
+ + |
+