+
Complete path of the filename including the filename
+fullpath
+text
Complete path of the filename including the filename
++
+
tlsh
tlsh
Object describing the original file used to import data in MISP..
+| + + | ++original-imported-file is a MISP object available in JSON format at this location The JSON format can be freely reused in your application or automatically enabled in MISP. + | +
| Object attribute | +MISP attribute type | +Description | +Disable correlation | +Multiple | +
|---|---|---|---|---|
imported-sample |
+attachment |
+
+ The original imported file itself (binary). + |
+
+ + |
+
+ + |
+
format |
+text |
+
+ Format of data imported. ['STIX 1.0', 'STIX 1.1', 'STIX 1.2', 'STIX 2.0', 'OpenIOC'] + |
+
+ + |
+
+ + |
+
uri |
+uri |
+
+ URI related to the imported file. + |
+
+ + |
+
+ + |
+
Analytics and tracking ID such as used in Google Analytics or other analytic platform..
+| + + | ++tracking-id is a MISP object available in JSON format at this location The JSON format can be freely reused in your application or automatically enabled in MISP. + | +
| Object attribute | +MISP attribute type | +Description | +Disable correlation | +Multiple | +
|---|---|---|---|---|
id |
+text |
+
+ Tracking code + |
+
+ + |
+
+ + |
+
tracker |
+text |
+
+ Name of the tracker - organisation doing the tracking and/or analytics ['Google Analytics', 'Piwik', 'Kissmetrics', 'Woopra', 'Chartbeat'] + |
+
+ + |
+
+ + |
+
description |
+text |
+
+ Description of the tracking id + |
+
+ + |
+
+ + |
+
url |
+url |
+
+ URL where the tracking id was found + |
+
+ + |
+
+ + |
+
hostname |
+hostname |
+
+ hostname where the tracking id was found + |
+
+ + |
+
+ + |
+
first-seen |
+datetime |
+
+ First time the tracking code was seen + |
+
+ + |
+
+ + |
+
last-seen |
+datetime |
+
+ Last time the tracking code was seen + |
+
+ + |
+
+ + |
+