Skip to content

Commit 17aadad

Browse files
authored
Merge pull request #510 from MISP/codex/add-misp-object-template-for-rulezet-metadata
Add ruleset-metadata MISP object template
2 parents e7e7e2d + 5bc5eca commit 17aadad

1 file changed

Lines changed: 126 additions & 0 deletions

File tree

Lines changed: 126 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,126 @@
1+
{
2+
"attributes": {
3+
"author": {
4+
"description": "Rule set author name or handle.",
5+
"disable_correlation": true,
6+
"misp-attribute": "text",
7+
"multiple": true,
8+
"ui-priority": 0
9+
},
10+
"creation-date": {
11+
"description": "Creation date of the rule set metadata record.",
12+
"disable_correlation": true,
13+
"misp-attribute": "datetime",
14+
"ui-priority": 0
15+
},
16+
"cve-id": {
17+
"description": "CVE identifier(s) associated with the rule set.",
18+
"disable_correlation": true,
19+
"misp-attribute": "vulnerability",
20+
"multiple": true,
21+
"ui-priority": 0
22+
},
23+
"description": {
24+
"description": "Description of the rule set.",
25+
"disable_correlation": true,
26+
"misp-attribute": "text",
27+
"ui-priority": 0
28+
},
29+
"editor": {
30+
"description": "Name of the user who last edited or maintains the rule set.",
31+
"disable_correlation": true,
32+
"misp-attribute": "text",
33+
"ui-priority": 0
34+
},
35+
"format": {
36+
"description": "Rule set format (for example YARA, NSE, Sigma).",
37+
"disable_correlation": true,
38+
"misp-attribute": "text",
39+
"ui-priority": 1
40+
},
41+
"github-path": {
42+
"description": "Path or URL pointing to the rule set source in GitHub.",
43+
"misp-attribute": "link",
44+
"ui-priority": 0
45+
},
46+
"is-favorited": {
47+
"description": "Indicates whether the rule set is marked as favorited.",
48+
"disable_correlation": true,
49+
"misp-attribute": "boolean",
50+
"ui-priority": 0
51+
},
52+
"last-modif": {
53+
"description": "Last modification date of the rule set metadata record.",
54+
"disable_correlation": true,
55+
"misp-attribute": "datetime",
56+
"ui-priority": 0
57+
},
58+
"license": {
59+
"description": "License applied to the rule set.",
60+
"disable_correlation": true,
61+
"misp-attribute": "text",
62+
"ui-priority": 0
63+
},
64+
"original-uuid": {
65+
"description": "Original UUID of the rule set in its source system.",
66+
"disable_correlation": true,
67+
"misp-attribute": "text",
68+
"ui-priority": 0
69+
},
70+
"source": {
71+
"description": "Source platform or provider of the rule set metadata.",
72+
"disable_correlation": true,
73+
"misp-attribute": "text",
74+
"ui-priority": 0
75+
},
76+
"title": {
77+
"description": "Human-readable title of the rule set.",
78+
"misp-attribute": "text",
79+
"ui-priority": 1
80+
},
81+
"to-string": {
82+
"description": "Serialized string representation of the rule set metadata.",
83+
"disable_correlation": true,
84+
"misp-attribute": "text",
85+
"ui-priority": 0
86+
},
87+
"user-id": {
88+
"description": "Identifier of the user associated with the rule set metadata.",
89+
"disable_correlation": true,
90+
"misp-attribute": "text",
91+
"ui-priority": 0
92+
},
93+
"uuid": {
94+
"description": "UUID of the rule set metadata record.",
95+
"misp-attribute": "text",
96+
"ui-priority": 1
97+
},
98+
"version": {
99+
"description": "Version identifier of the rule set.",
100+
"disable_correlation": true,
101+
"misp-attribute": "text",
102+
"ui-priority": 0
103+
},
104+
"vote-down": {
105+
"description": "Number of downvotes for the rule set.",
106+
"disable_correlation": true,
107+
"misp-attribute": "counter",
108+
"ui-priority": 0
109+
},
110+
"vote-up": {
111+
"description": "Number of upvotes for the rule set.",
112+
"disable_correlation": true,
113+
"misp-attribute": "counter",
114+
"ui-priority": 0
115+
}
116+
},
117+
"description": "Rule set metadata object meant to be linked to rule content objects such as YARA, NSE, Sigma or similar templates.",
118+
"meta-category": "misc",
119+
"name": "ruleset-metadata",
120+
"required": [
121+
"title",
122+
"uuid"
123+
],
124+
"uuid": "5f4a076e-5e48-4534-b84d-f161de838851",
125+
"version": 1
126+
}

0 commit comments

Comments
 (0)