From 3e3800a3d53fbb6372b88ab85415db48ba13598a Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Sun, 24 Sep 2017 20:26:46 +0200 Subject: [PATCH] Objects updated --- objects.html | 2717 ++++++++++++++++++++++++++------------------------ 1 file changed, 1408 insertions(+), 1309 deletions(-) diff --git a/objects.html b/objects.html index faaf213..02d1efc 100755 --- a/objects.html +++ b/objects.html @@ -444,6 +444,7 @@ body.book #toc,body.book #preamble,body.book h1.sect0,body.book .sect1>h2{page-b
  • geolocation
  • http-request
  • ip|port
  • +
  • ja3
  • macho
  • macho-section
  • passive-dns
  • @@ -515,14 +516,34 @@ ail-leak is a MISP object available in JSON format at

    origin

    -

    url

    +

    original-date

    +

    datetime

    +

    +
    + + +

    text

    +

    text

    +

    +
    +

    +
    + + +

    first-seen

    +

    datetime

    +
    +

    +
    +
    +

    +

    last-seen

    @@ -535,28 +556,8 @@ ail-leak is a MISP object available in JSON format at

    text

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    original-date

    -

    datetime

    -
    -

    -
    -
    -

    -
    - - -

    type

    -

    text

    +

    origin

    +

    url

    @@ -575,13 +576,13 @@ ail-leak is a MISP object available in JSON format at

    first-seen

    -

    datetime

    +

    type

    +

    text

    -

    +

    @@ -623,6 +624,16 @@ cookie is a MISP object available in JSON format at

    cookie-value

    +

    text

    +
    +

    +
    +
    +

    +
    + +

    text

    text

    @@ -633,16 +644,6 @@ cookie is a MISP object available in JSON format at

    cookie

    -

    cookie

    -
    -

    -
    -
    -

    -
    - -

    cookie-name

    text

    @@ -653,8 +654,8 @@ cookie is a MISP object available in JSON format at

    cookie-value

    -

    text

    +

    cookie

    +

    cookie

    @@ -711,18 +712,8 @@ credit-card is a MISP object available in JSON format at

    comment

    -

    comment

    -
    -

    -
    -
    -

    -
    - - -

    expiration

    -

    datetime

    +

    version

    +

    text

    @@ -741,7 +732,17 @@ credit-card is a MISP object available in JSON format at

    issued

    +

    card-security-code

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    expiration

    datetime

    @@ -761,7 +762,7 @@ credit-card is a MISP object available in JSON format at

    version

    +

    comment

    comment

    @@ -771,8 +772,8 @@ credit-card is a MISP object available in JSON format at

    card-security-code

    -

    text

    +

    issued

    +

    datetime

    @@ -819,18 +820,8 @@ ddos is a MISP object available in JSON format at

    text

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    ip-dst

    -

    ip-dst

    +

    total-bps

    +

    counter

    @@ -849,6 +840,56 @@ ddos is a MISP object available in JSON format at

    last-seen

    +

    datetime

    +
    +

    +
    +
    +

    +
    + + +

    text

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    total-pps

    +

    counter

    +
    +

    +
    +
    +

    +
    + + +

    dst-port

    +

    port

    +
    +

    +
    +
    +

    +
    + + +

    ip-dst

    +

    ip-dst

    +
    +

    +
    +
    +

    +
    + +

    protocol

    text

    @@ -869,46 +910,6 @@ ddos is a MISP object available in JSON format at

    total-pps

    -

    counter

    -
    -

    -
    -
    -

    -
    - - -

    total-bps

    -

    counter

    -
    -

    -
    -
    -

    -
    - - -

    last-seen

    -

    datetime

    -
    -

    -
    -
    -

    -
    - - -

    dst-port

    -

    port

    -
    -

    -
    -
    -

    -
    - -

    first-seen

    datetime

    @@ -1045,8 +1046,8 @@ elf is a MISP object available in JSON format at

    text

    -

    text

    +

    number-sections

    +

    counter

    @@ -1055,7 +1056,7 @@ elf is a MISP object available in JSON format at

    os_abi

    +

    arch

    text

    @@ -1075,17 +1076,7 @@ elf is a MISP object available in JSON format at

    number-sections

    -

    counter

    -
    -

    -
    -
    -

    -
    - - -

    arch

    +

    os_abi

    text

    @@ -1095,6 +1086,16 @@ elf is a MISP object available in JSON format at

    text

    +

    text

    +
    +

    +
    +
    +

    +
    + +

    type

    text

    @@ -1143,18 +1144,8 @@ elf-section is a MISP object available in JSON format at

    entropy

    -

    float

    -
    -

    -
    -
    -

    -
    - - -

    sha512/224

    -

    sha512/224

    +

    sha1

    +

    sha1

    @@ -1163,27 +1154,7 @@ elf-section is a MISP object available in JSON format at

    sha384

    -

    sha384

    -
    -

    -
    -
    -

    -
    - - -

    sha512/256

    -

    sha512/256

    -
    -

    -
    -
    -

    -
    - - -

    type

    +

    name

    text

    @@ -1193,6 +1164,46 @@ elf-section is a MISP object available in JSON format at

    text

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    sha384

    +

    sha384

    +
    +

    +
    +
    +

    +
    + + +

    sha512/224

    +

    sha512/224

    +
    +

    +
    +
    +

    +
    + + +

    size-in-bytes

    +

    size-in-bytes

    +
    +

    +
    +
    +

    +
    + +

    ssdeep

    ssdeep

    @@ -1203,6 +1214,16 @@ elf-section is a MISP object available in JSON format at

    sha512

    +

    sha512

    +
    +

    +
    +
    +

    +
    + +

    sha256

    sha256

    @@ -1223,8 +1244,8 @@ elf-section is a MISP object available in JSON format at

    md5

    -

    md5

    +

    sha512/256

    +

    sha512/256

    @@ -1233,16 +1254,6 @@ elf-section is a MISP object available in JSON format at

    name

    -

    text

    -
    -

    -
    -
    -

    -
    - -

    sha224

    sha224

    @@ -1253,27 +1264,17 @@ elf-section is a MISP object available in JSON format at

    sha512

    -

    sha512

    +

    entropy

    +

    float

    -

    +

    -

    sha1

    -

    sha1

    -
    -

    -
    -
    -

    -
    - - -

    text

    +

    type

    text

    @@ -1283,13 +1284,13 @@ elf-section is a MISP object available in JSON format at

    size-in-bytes

    -

    size-in-bytes

    +

    md5

    +

    md5

    -

    +

    @@ -1331,8 +1332,8 @@ email is a MISP object available in JSON format at

    thread-index

    -

    email-thread-index

    +

    x-mailer

    +

    email-x-mailer

    @@ -1351,6 +1352,66 @@ email is a MISP object available in JSON format at

    header

    +

    email-header

    +
    +

    +
    +
    +

    +
    + + +

    from-display-name

    +

    email-src-display-name

    +
    +

    +
    +
    +

    +
    + + +

    from

    +

    email-src

    +
    +

    +
    +
    +

    +
    + + +

    thread-index

    +

    email-thread-index

    +
    +

    +
    +
    +

    +
    + + +

    send-date

    +

    datetime

    +
    +

    +
    +
    +

    +
    + + +

    to

    +

    email-dst

    +
    +

    +
    +
    +

    +
    + +

    reply-to

    email-reply-to

    @@ -1371,36 +1432,6 @@ email is a MISP object available in JSON format at

    mime-boundary

    -

    email-mime-boundary

    -
    -

    -
    -
    -

    -
    - - -

    from

    -

    email-src

    -
    -

    -
    -
    -

    -
    - - -

    from-display-name

    -

    email-src-display-name

    -
    -

    -
    -
    -

    -
    - -

    message-id

    email-message-id

    @@ -1421,38 +1452,8 @@ email is a MISP object available in JSON format at

    to

    -

    email-dst

    -
    -

    -
    -
    -

    -
    - - -

    send-date

    -

    datetime

    -
    -

    -
    -
    -

    -
    - - -

    header

    -

    email-header

    -
    -

    -
    -
    -

    -
    - - -

    x-mailer

    -

    email-x-mailer

    +

    mime-boundary

    +

    email-mime-boundary

    @@ -1499,8 +1500,18 @@ file is a MISP object available in JSON format at

    entropy

    -

    float

    +

    sha1

    +

    sha1

    +
    +

    +
    +
    +

    +
    + + +

    text

    +

    text

    @@ -1509,46 +1520,6 @@ file is a MISP object available in JSON format at

    authentihash

    -

    authentihash

    -
    -

    -
    -
    -

    -
    - - -

    sha512/224

    -

    sha512/224

    -
    -

    -
    -
    -

    -
    - - -

    filename

    -

    filename

    -
    -

    -
    -
    -

    -
    - - -

    tlsh

    -

    tlsh

    -
    -

    -
    -
    -

    -
    - -

    sha384

    sha384

    + +

    ssdeep

    +

    ssdeep

    +
    +

    +
    +
    +

    +
    + + +

    sha512

    +

    sha512

    +
    +

    +
    +
    +

    +
    + + +

    pattern-in-file

    +

    pattern-in-file

    +
    +

    +
    +
    +

    +
    + + +

    sha256

    +

    sha256

    +
    +

    +
    +
    +

    +
    + + +

    malware-sample

    +

    malware-sample

    +
    +

    +
    +
    +

    +
    + + +

    sha512/256

    +

    sha512/256

    +
    +

    +
    +
    +

    +
    + + +

    sha224

    +

    sha224

    +
    +

    +
    +
    +

    +
    + + +

    filename

    +

    filename

    +
    +

    +
    +
    +

    +
    + + +

    entropy

    +

    float

    +
    +

    +
    +
    +

    +
    + + +

    md5

    +

    md5

    +
    +

    +
    +
    +

    +
    +
    @@ -1717,8 +1718,8 @@ geolocation is a MISP object available in JSON format at

    region

    -

    text

    +

    altitude

    +

    float

    @@ -1727,6 +1728,46 @@ geolocation is a MISP object available in JSON format at

    text

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    first-seen

    +

    datetime

    +
    +

    +
    +
    +

    +
    + + +

    longitude

    +

    float

    +
    +

    +
    +
    +

    +
    + + +

    latitude

    +

    float

    +
    +

    +
    +
    +

    +
    + +

    country

    text

    - -

    first-seen

    -

    datetime

    -
    -

    -
    -
    -

    -
    - - -

    longitude

    -

    float

    -
    -

    -
    -
    -

    -
    -
    @@ -1845,17 +1846,17 @@ http-request is a MISP object available in JSON format at

    user-agent

    -

    user-agent

    +

    text

    +

    text

    -

    +

    -

    cookie

    +

    basicauth-user

    text

    @@ -1875,16 +1876,6 @@ http-request is a MISP object available in JSON format at

    url

    -

    url

    -
    -

    -
    -
    -

    -
    - -

    method

    http-method

    @@ -1895,16 +1886,6 @@ http-request is a MISP object available in JSON format at

    proxy-password

    -

    text

    -
    -

    -
    -
    -

    -
    - -

    host

    hostname

    @@ -1915,7 +1896,7 @@ http-request is a MISP object available in JSON format at

    basicauth-user

    +

    cookie

    text

    @@ -1925,6 +1906,26 @@ http-request is a MISP object available in JSON format at

    proxy-password

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    referer

    +

    referer

    +
    +

    +
    +
    +

    +
    + +

    uri

    uri

    @@ -1935,6 +1936,26 @@ http-request is a MISP object available in JSON format at

    url

    +

    url

    +
    +

    +
    +
    +

    +
    + + +

    content-type

    +

    other

    +
    +

    +
    +
    +

    +
    + +

    basicauth-password

    text

    +
    +

    ja3

    +
    +
    +

    JA3 is a new technique for creating SSL client fingerprints that are easy to produce and can be easily shared for threat intelligence. Fingerprints are composed of Client Hello packet; SSL Version, Accepted Ciphers, List of Extensions, Elliptic Curves, and Elliptic Curve Formats. https://github.com/salesforce/ja3.

    +
    +
    + + + + + +
    + + +ja3 is a MISP object available in JSON format at this location The JSON format can be freely reused in your application or automatically enabled in MISP. +
    +
    + ++++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Object attributeMISP attribute typeDescriptionDisable correlation

    description

    text

    @@ -2072,6 +2131,46 @@ ip|port is a MISP object available in JSON format at

    ip-dst

    ip-dst

    +

    +
    +

    +

    ja3-fingerprint-md5

    md5

    +

    +
    +

    +

    ip-src

    ip-src

    +

    +
    +

    +

    last-seen

    datetime

    +

    +
    +

    +
    @@ -2121,6 +2220,26 @@ macho is a MISP object available in JSON format at

    number-sections

    +

    counter

    +
    +

    +
    +
    +

    +
    + + +

    text

    +

    text

    +
    +

    +
    +
    +

    +
    + +

    entrypoint-address

    text

    - -

    text

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    number-sections

    -

    counter

    -
    -

    -
    -
    -

    -
    -
    @@ -2199,68 +2298,8 @@ macho-section is a MISP object available in JSON format at

    entropy

    -

    float

    -
    -

    -
    -
    -

    -
    - - -

    sha512/224

    -

    sha512/224

    -
    -

    -
    -
    -

    -
    - - -

    sha384

    -

    sha384

    -
    -

    -
    -
    -

    -
    - - -

    sha512/256

    -

    sha512/256

    -
    -

    -
    -
    -

    -
    - - -

    ssdeep

    -

    ssdeep

    -
    -

    -
    -
    -

    -
    - - -

    sha256

    -

    sha256

    -
    -

    -
    -
    -

    -
    - - -

    md5

    -

    md5

    +

    sha1

    +

    sha1

    @@ -2279,8 +2318,48 @@ macho-section is a MISP object available in JSON format at

    sha224

    -

    sha224

    +

    text

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    sha384

    +

    sha384

    +
    +

    +
    +
    +

    +
    + + +

    sha512/224

    +

    sha512/224

    +
    +

    +
    +
    +

    +
    + + +

    size-in-bytes

    +

    size-in-bytes

    +
    +

    +
    +
    +

    +
    + + +

    ssdeep

    +

    ssdeep

    @@ -2299,8 +2378,8 @@ macho-section is a MISP object available in JSON format at

    sha1

    -

    sha1

    +

    sha256

    +

    sha256

    @@ -2309,8 +2388,28 @@ macho-section is a MISP object available in JSON format at

    text

    -

    text

    +

    sha512/256

    +

    sha512/256

    +
    +

    +
    +
    +

    +
    + + +

    sha224

    +

    sha224

    +
    +

    +
    +
    +

    +
    + + +

    entropy

    +

    float

    @@ -2319,13 +2418,13 @@ macho-section is a MISP object available in JSON format at

    size-in-bytes

    -

    size-in-bytes

    +

    md5

    +

    md5

    -

    +

    @@ -2367,8 +2466,18 @@ passive-dns is a MISP object available in JSON format at

    time_first

    -

    datetime

    +

    rrname

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    text

    +

    text

    @@ -2387,7 +2496,7 @@ passive-dns is a MISP object available in JSON format at

    rrname

    +

    rdata

    text

    @@ -2397,17 +2506,7 @@ passive-dns is a MISP object available in JSON format at

    rrtype

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    zone_time_first

    +

    time_first

    datetime

    @@ -2417,7 +2516,27 @@ passive-dns is a MISP object available in JSON format at

    rdata

    +

    time_last

    +

    datetime

    +
    +

    +
    +
    +

    +
    + + +

    zone_time_last

    +

    datetime

    +
    +

    +
    +
    +

    +
    + + +

    rrtype

    text

    @@ -2525,7 +2624,7 @@ pe is a MISP object available in JSON format at

    company-name

    +

    legal-copyright

    text

    @@ -2535,7 +2634,7 @@ pe is a MISP object available in JSON format at

    entrypoint-section-at-position

    +

    product-version

    text

    @@ -2545,23 +2644,23 @@ pe is a MISP object available in JSON format at

    compilation-timestamp

    -

    datetime

    +

    number-sections

    +

    counter

    -

    +

    -

    impfuzzy

    -

    impfuzzy

    +

    text

    +

    text

    -

    +

    @@ -2585,6 +2684,36 @@ pe is a MISP object available in JSON format at

    company-name

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    pehash

    +

    pehash

    +
    +

    +
    +
    +

    +
    + + +

    entrypoint-section-at-position

    +

    text

    +
    +

    +
    +
    +

    +
    + +

    original-filename

    filename

    @@ -2595,6 +2724,16 @@ pe is a MISP object available in JSON format at

    imphash

    +

    imphash

    +
    +

    +
    +
    +

    +
    + +

    type

    text

    @@ -2605,8 +2744,8 @@ pe is a MISP object available in JSON format at

    pehash

    -

    pehash

    +

    compilation-timestamp

    +

    datetime

    @@ -2615,26 +2754,6 @@ pe is a MISP object available in JSON format at

    file-version

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    legal-copyright

    -

    text

    -
    -

    -
    -
    -

    -
    - -

    entrypoint-address

    text

    @@ -2645,7 +2764,7 @@ pe is a MISP object available in JSON format at

    lang-id

    +

    file-version

    text

    @@ -2743,78 +2842,8 @@ pe-section is a MISP object available in JSON format at

    entropy

    -

    float

    -
    -

    -
    -
    -

    -
    - - -

    sha512/224

    -

    sha512/224

    -
    -

    -
    -
    -

    -
    - - -

    characteristic

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    sha384

    -

    sha384

    -
    -

    -
    -
    -

    -
    - - -

    sha512/256

    -

    sha512/256

    -
    -

    -
    -
    -

    -
    - - -

    ssdeep

    -

    ssdeep

    -
    -

    -
    -
    -

    -
    - - -

    sha256

    -

    sha256

    -
    -

    -
    -
    -

    -
    - - -

    md5

    -

    md5

    +

    sha1

    +

    sha1

    @@ -2833,8 +2862,48 @@ pe-section is a MISP object available in JSON format at

    sha224

    -

    sha224

    +

    text

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    sha384

    +

    sha384

    +
    +

    +
    +
    +

    +
    + + +

    sha512/224

    +

    sha512/224

    +
    +

    +
    +
    +

    +
    + + +

    size-in-bytes

    +

    size-in-bytes

    +
    +

    +
    +
    +

    +
    + + +

    ssdeep

    +

    ssdeep

    @@ -2853,8 +2922,8 @@ pe-section is a MISP object available in JSON format at

    sha1

    -

    sha1

    +

    sha256

    +

    sha256

    @@ -2863,8 +2932,38 @@ pe-section is a MISP object available in JSON format at

    sha512/256

    +

    sha512/256

    +
    +

    +
    +
    +

    +
    + + +

    sha224

    +

    sha224

    +
    +

    +
    +
    +

    +
    + + +

    characteristic

    text

    -

    text

    +
    +

    +
    +
    +

    +
    + + +

    entropy

    +

    float

    @@ -2873,13 +2972,13 @@ pe-section is a MISP object available in JSON format at

    size-in-bytes

    -

    size-in-bytes

    +

    md5

    +

    md5

    -

    +

    @@ -2921,23 +3020,13 @@ person is a MISP object available in JSON format at

    passport-country

    -

    passport-country

    +

    text

    +

    text

    -

    -
    - - -

    nationality

    -

    nationality

    -
    -

    -
    -
    -

    +

    @@ -2951,8 +3040,8 @@ person is a MISP object available in JSON format at

    first-name

    -

    first-name

    +

    place-of-birth

    +

    place-of-birth

    @@ -2961,18 +3050,8 @@ person is a MISP object available in JSON format at

    redress-number

    -

    redress-number

    -
    -

    -
    -
    -

    -
    - - -

    date-of-birth

    -

    date-of-birth

    +

    first-name

    +

    first-name

    @@ -3001,26 +3080,6 @@ person is a MISP object available in JSON format at

    place-of-birth

    -

    place-of-birth

    -
    -

    -
    -
    -

    -
    - - -

    text

    -

    text

    -
    -

    -
    -
    -

    -
    - -

    passport-expiration

    passport-expiration

    @@ -3079,7 +3178,7 @@ phone is a MISP object available in JSON format at

    imsi

    +

    gummei

    text

    @@ -3089,7 +3188,7 @@ phone is a MISP object available in JSON format at

    msisdn

    +

    guti

    text

    @@ -3119,7 +3218,27 @@ phone is a MISP object available in JSON format at

    gummei

    +

    serial-number

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    first-seen

    +

    datetime

    +
    +

    +
    +
    +

    +
    + + +

    imsi

    text

    @@ -3217,6 +3316,16 @@ r2graphity is a MISP object available in JSON format at

    ratio-api

    +

    float

    +
    +

    +
    +
    +

    +
    + +

    callback-average

    counter

    @@ -3227,6 +3336,16 @@ r2graphity is a MISP object available in JSON format at

    callbacks

    +

    counter

    +
    +

    +
    +
    +

    +
    + +

    memory-allocations

    counter

    @@ -3237,7 +3356,7 @@ r2graphity is a MISP object available in JSON format at

    get-proc-address

    +

    not-referenced-strings

    counter

    @@ -3257,26 +3376,6 @@ r2graphity is a MISP object available in JSON format at

    total-api

    -

    counter

    -
    -

    -
    -
    -

    -
    - - -

    refsglobalvar

    -

    counter

    -
    -

    -
    -
    -

    -
    - -

    referenced-strings

    counter

    @@ -3297,27 +3396,7 @@ r2graphity is a MISP object available in JSON format at

    ratio-string

    -

    float

    -
    -

    -
    -
    -

    -
    - - -

    text

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    callbacks

    +

    get-proc-address

    counter

    @@ -3327,17 +3406,7 @@ r2graphity is a MISP object available in JSON format at

    ratio-api

    -

    float

    -
    -

    -
    -
    -

    -
    - - -

    unknown-references

    +

    dangling-strings

    counter

    @@ -3357,7 +3426,67 @@ r2graphity is a MISP object available in JSON format at

    not-referenced-strings

    +

    text

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    ratio-functions

    +

    float

    +
    +

    +
    +
    +

    +
    + + +

    shortest-path-to-create-thread

    +

    counter

    +
    +

    +
    +
    +

    +
    + + +

    unknown-references

    +

    counter

    +
    +

    +
    +
    +

    +
    + + +

    ratio-string

    +

    float

    +
    +

    +
    +
    +

    +
    + + +

    gml

    +

    attachment

    +
    +

    +
    +
    +

    +
    + + +

    refsglobalvar

    counter

    @@ -3475,6 +3574,16 @@ regexp is a MISP object available in JSON format at

    regexp-type

    +

    text

    +
    +

    Type of the regular expression syntax. ['PCRE', 'PCRE2', 'POSIX BRE', 'POSIX ERE']

    +
    +
    +

    +
    + +

    comment

    comment

    - -

    regexp-type

    -

    text

    -
    -

    Type of the regular expression syntax. ['PCRE', 'PCRE2', 'POSIX BRE', 'POSIX ERE']

    -
    -
    -

    -
    -
    @@ -3543,36 +3642,6 @@ registry-key is a MISP object available in JSON format at

    data

    -

    reg-data

    -
    -

    -
    -
    -

    -
    - - -

    last-modified

    -

    datetime

    -
    -

    -
    -
    -

    -
    - - -

    hive

    -

    reg-hive

    -
    -

    -
    -
    -

    -
    - -

    name

    reg-name

    + +

    data

    +

    reg-data

    +
    +

    +
    +
    +

    +
    + + +

    hive

    +

    reg-hive

    +
    +

    +
    +
    +

    +
    + + +

    last-modified

    +

    datetime

    +
    +

    +
    +
    +

    +
    +
    @@ -3641,56 +3740,6 @@ tor-node is a MISP object available in JSON format at

    description

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    flags

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    version

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    document

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    first-seen

    -

    datetime

    -
    -

    -
    -
    -

    -
    - -

    address

    ip-src

    @@ -3701,6 +3750,16 @@ tor-node is a MISP object available in JSON format at

    text

    +

    text

    +
    +

    +
    +
    +

    +
    + +

    version_line

    text

    @@ -3711,7 +3770,37 @@ tor-node is a MISP object available in JSON format at

    fingerprint

    +

    first-seen

    +

    datetime

    +
    +

    +
    +
    +

    +
    + + +

    published

    +

    datetime

    +
    +

    +
    +
    +

    +
    + + +

    document

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    version

    text

    @@ -3721,7 +3810,7 @@ tor-node is a MISP object available in JSON format at

    text

    +

    description

    text

    @@ -3731,6 +3820,16 @@ tor-node is a MISP object available in JSON format at

    fingerprint

    +

    text

    +
    +

    +
    +
    +

    +
    + +

    nickname

    text

    @@ -3741,17 +3840,17 @@ tor-node is a MISP object available in JSON format at

    last-seen

    -

    datetime

    +

    flags

    +

    text

    -

    +

    -

    published

    +

    last-seen

    datetime

    @@ -3799,86 +3898,6 @@ url is a MISP object available in JSON format at

    domain

    -

    domain

    -
    -

    -
    -
    -

    -
    - - -

    url

    -

    url

    -
    -

    -
    -
    -

    -
    - - -

    port

    -

    port

    -
    -

    -
    -
    -

    -
    - - -

    tld

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    first-seen

    -

    datetime

    -
    -

    -
    -
    -

    -
    - - -

    host

    -

    hostname

    -
    -

    -
    -
    -

    -
    - - -

    scheme

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    resource_path

    -

    text

    -
    -

    -
    -
    -

    -
    - -

    credential

    text

    @@ -3889,36 +3908,6 @@ url is a MISP object available in JSON format at

    domain_without_tld

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    subdomain

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    fragment

    -

    text

    -
    -

    -
    -
    -

    -
    - -

    text

    text

    @@ -3939,6 +3928,116 @@ url is a MISP object available in JSON format at

    first-seen

    +

    datetime

    +
    +

    +
    +
    +

    +
    + + +

    fragment

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    host

    +

    hostname

    +
    +

    +
    +
    +

    +
    + + +

    subdomain

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    resource_path

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    tld

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    domain

    +

    domain

    +
    +

    +
    +
    +

    +
    + + +

    url

    +

    url

    +
    +

    +
    +
    +

    +
    + + +

    port

    +

    port

    +
    +

    +
    +
    +

    +
    + + +

    scheme

    +

    text

    +
    +

    +
    +
    +

    +
    + + +

    domain_without_tld

    +

    text

    +
    +

    +
    +
    +

    +
    + +

    query_string

    text

    @@ -3987,16 +4086,6 @@ vulnerability is a MISP object available in JSON format at

    modified

    -

    datetime

    -
    -

    -
    -
    -

    -
    - -

    id

    vulnerability

    @@ -4007,26 +4096,6 @@ vulnerability is a MISP object available in JSON format at

    references

    -

    link

    -
    -

    -
    -
    -

    -
    - - -

    vulnerable_configuration

    -

    text

    -
    -

    -
    -
    -

    -
    - -

    summary

    text

    @@ -4095,46 +4194,6 @@ whois is a MISP object available in JSON format at

    expiration-date

    -

    datetime

    -
    -

    -
    -
    -

    -
    - - -

    modification-date

    -

    datetime

    -
    -

    -
    -
    -

    -
    - - -

    registrant-name

    -

    whois-registrant-name

    -
    -

    -
    -
    -

    -
    - - -

    registrant-phone

    -

    whois-registrant-phone

    -
    -

    -
    -
    -

    -
    - -

    creation-date

    datetime

    @@ -4155,6 +4214,36 @@ whois is a MISP object available in JSON format at

    registar

    +

    whois-registrar

    +
    +

    +
    +
    +

    +
    + + +

    expiration-date

    +

    datetime

    +
    +

    +
    +
    +

    +
    + + +

    registrant-phone

    +

    whois-registrant-phone

    +
    +

    +
    +
    +

    +
    + +

    registrant-email

    whois-registrant-email

    @@ -4165,8 +4254,18 @@ whois is a MISP object available in JSON format at

    registar

    -

    whois-registar

    +

    modification-date

    +

    datetime

    +
    +

    +
    +
    +

    +
    + + +

    registrant-name

    +

    whois-registrant-name

    @@ -4223,36 +4322,6 @@ x509 is a MISP object available in JSON format at

    issuer

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    x509-fingerprint-md5

    -

    md5

    -
    -

    -
    -
    -

    -
    - - -

    raw-base64

    -

    text

    -
    -

    -
    -
    -

    -
    - -

    subject

    text

    @@ -4263,66 +4332,6 @@ x509 is a MISP object available in JSON format at

    x509-fingerprint-sha1

    -

    sha1

    -
    -

    -
    -
    -

    -
    - - -

    x509-fingerprint-sha256

    -

    sha256

    -
    -

    -
    -
    -

    -
    - - -

    pubkey-info-exponent

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    validity-not-before

    -

    datetime

    -
    -

    -
    -
    -

    -
    - - -

    version

    -

    text

    -
    -

    -
    -
    -

    -
    - - -

    pubkey-info-modulus

    -

    text

    -
    -

    -
    -
    -

    -
    - -

    pubkey-info-size

    text