MISP
/
misp-website
mirror of https://github.com/MISP/misp-website
2
0
Fork 0
Code Issues Releases Wiki Activity

chg:[datamodels] ssh-fingerprint added

pull/54/head
Alexandre Dulaunoy 2021-10-26 11:40:17 +02:00
parent 39cae4b886
commit 3be916b920
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 8 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
_pages/datamodels.md
View File

@ -67,6 +67,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
|eppn| | | | | | | |eppn| | | | | | |
|favicon-mmh3| | | | | | | |favicon-mmh3| | | | | | |
|filename| | X | | X | | | |filename| | X | | X | | |
|filename-pattern| | X | | X | | |
|filename|authentihash| | X | | | | | |filename|authentihash| | X | | | | |
|filename|impfuzzy| | X | | | | | |filename|impfuzzy| | X | | | | |
|filename|imphash| | X | | | | | |filename|imphash| | X | | | | |
@ -133,7 +134,6 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
|passport-country| | | | | | | |passport-country| | | | | | |
|passport-expiration| | | | | | | |passport-expiration| | | | | | |
|passport-number| | | | | | | |passport-number| | | | | | |
|pattern-filename| | | | | | |
|pattern-in-file| | X | | X | | | |pattern-in-file| | X | | X | | |
|pattern-in-memory| | X | | X | | | |pattern-in-memory| | X | | X | | |
|pattern-in-traffic| | | | X | | | |pattern-in-traffic| | | | X | | |
@ -170,6 +170,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
|snort| | | | X | | | |snort| | | | X | | |
|special-service-request| | | | | | | |special-service-request| | | | | | |
|ssdeep| | X | | | | | |ssdeep| | X | | | | |
|ssh-fingerprint| | | | | | |
|stix2-pattern| | X | | | | | |stix2-pattern| | X | | | | |
|target-email| | | | | | | |target-email| | | | | | |
|target-external| | | | | | | |target-external| | | | | | |
@ -256,6 +257,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
|eppn| X | | | | | | |eppn| X | | | | | |
|favicon-mmh3| X | | | | | | |favicon-mmh3| X | | | | | |
|filename| | | X | X | | X | |filename| | | X | X | | X |
|filename-pattern| X | | X | X | | |
|filename|authentihash| | | X | X | | | |filename|authentihash| | | X | X | | |
|filename|impfuzzy| | | X | X | | | |filename|impfuzzy| | | X | X | | |
|filename|imphash| | | X | X | | | |filename|imphash| | | X | X | | |
@ -322,7 +324,6 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
|passport-country| | | | | | | |passport-country| | | | | | |
|passport-expiration| | | | | | | |passport-expiration| | | | | | |
|passport-number| | | | | | | |passport-number| | | | | | |
|pattern-filename| | | | | | |
|pattern-in-file| X | | X | X | | | |pattern-in-file| X | | X | X | | |
|pattern-in-memory| | | | X | | | |pattern-in-memory| | | | X | | |
|pattern-in-traffic| X | | X | X | | | |pattern-in-traffic| X | | X | X | | |
@ -359,6 +360,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
|snort| X | | | | | | |snort| X | | | | | |
|special-service-request| | | | | | | |special-service-request| | | | | | |
|ssdeep| | | X | X | | | |ssdeep| | | X | X | | |
|ssh-fingerprint| X | | | | | |
|stix2-pattern| X | | X | X | | | |stix2-pattern| X | | X | X | | |
|target-email| | | | | | | |target-email| | | | | | |
|target-external| | | | | | | |target-external| | | | | | |
@ -445,6 +447,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
|eppn| | X | | | |eppn| | X | | |
|favicon-mmh3| | | | | |favicon-mmh3| | | | |
|filename| | | | | |filename| | | | |
|filename-pattern| | | | |
|filename|authentihash| | | | | |filename|authentihash| | | | |
|filename|impfuzzy| | | | | |filename|impfuzzy| | | | |
|filename|imphash| | | | | |filename|imphash| | | | |
@ -511,7 +514,6 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
|passport-country| X | | | | |passport-country| X | | | |
|passport-expiration| X | | | | |passport-expiration| X | | | |
|passport-number| X | | | | |passport-number| X | | | |
|pattern-filename| | | | |
|pattern-in-file| | | | | |pattern-in-file| | | | |
|pattern-in-memory| | | | | |pattern-in-memory| | | | |
|pattern-in-traffic| | | | | |pattern-in-traffic| | | | |
@ -548,6 +550,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
|snort| | | | | |snort| | | | |
|special-service-request| X | | | | |special-service-request| X | | | |
|ssdeep| | | | | |ssdeep| | | | |
|ssh-fingerprint| | | | |
|stix2-pattern| | | | | |stix2-pattern| | | | |
|target-email| | | | X | |target-email| | | | X |
|target-external| | | | X | |target-external| | | | X |
@ -654,6 +657,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
* **eppn**: eduPersonPrincipalName - eppn - the NetId of the person for the purposes of inter-institutional authentication. Should be stored in the form of user@univ.edu, where univ.edu is the name of the local security domain. * **eppn**: eduPersonPrincipalName - eppn - the NetId of the person for the purposes of inter-institutional authentication. Should be stored in the form of user@univ.edu, where univ.edu is the name of the local security domain.
* **favicon-mmh3**: favicon-mmh3 is the murmur3 hash of a favicon as used in Shodan. * **favicon-mmh3**: favicon-mmh3 is the murmur3 hash of a favicon as used in Shodan.
* **filename**: Filename * **filename**: Filename
* **filename-pattern**: A pattern in the name of a file
* **filename|authentihash**: A checksum in md5 format * **filename|authentihash**: A checksum in md5 format
* **filename|impfuzzy**: Import fuzzy hash - a fuzzy hash created based on the imports in the sample. * **filename|impfuzzy**: Import fuzzy hash - a fuzzy hash created based on the imports in the sample.
* **filename|imphash**: Import hash - a hash created based on the imports in the sample. * **filename|imphash**: Import hash - a hash created based on the imports in the sample.
@ -720,7 +724,6 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
* **passport-country**: The country in which the passport was issued * **passport-country**: The country in which the passport was issued
* **passport-expiration**: The expiration date of a passport * **passport-expiration**: The expiration date of a passport
* **passport-number**: The passport number of a natural person * **passport-number**: The passport number of a natural person
* **pattern-filename**: A pattern in the name of a file
* **pattern-in-file**: Pattern in file that identifies the malware * **pattern-in-file**: Pattern in file that identifies the malware
* **pattern-in-memory**: Pattern in memory dump that identifies the malware * **pattern-in-memory**: Pattern in memory dump that identifies the malware
* **pattern-in-traffic**: Pattern in network traffic that identifies the malware * **pattern-in-traffic**: Pattern in network traffic that identifies the malware
@ -757,6 +760,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/
* **snort**: An IDS rule in Snort rule-format * **snort**: An IDS rule in Snort rule-format
* **special-service-request**: A Special Service Request is a function to an airline to provide a particular facility for A Passenger or passengers. * **special-service-request**: A Special Service Request is a function to an airline to provide a particular facility for A Passenger or passengers.
* **ssdeep**: A checksum in ssdeep format * **ssdeep**: A checksum in ssdeep format
* **ssh-fingerprint**: A fingerprint of SSH key material
* **stix2-pattern**: STIX 2 pattern * **stix2-pattern**: STIX 2 pattern
* **target-email**: Attack Targets Email(s) * **target-email**: Attack Targets Email(s)
* **target-external**: External Target Organizations Affected by this Attack * **target-external**: External Target Organizations Affected by this Attack