Skip to content

Commit a1d2ca2

Browse files
committed
Merge branch 'main' of github.com:MISP/misp-objects
2 parents 5feb052 + 0e4c819 commit a1d2ca2

2 files changed

Lines changed: 56 additions & 0 deletions

File tree

objects/c2-list/definition.json

Lines changed: 50 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,50 @@
1+
{
2+
"attributes": {
3+
"c2-ip": {
4+
"categories": [
5+
"Network activity"
6+
],
7+
"description": "IP of C2 server with unknown port",
8+
"misp-attribute": "ip-src",
9+
"multiple": true,
10+
"ui-priority": 1
11+
},
12+
"c2-ipport": {
13+
"categories": [
14+
"Network activity"
15+
],
16+
"description": "IP:Port of C2 server",
17+
"misp-attribute": "ip-src|port",
18+
"multiple": true,
19+
"ui-priority": 1
20+
},
21+
"report-url": {
22+
"description": "URL of source of information, e.g. blog post, ransomware analysis",
23+
"disable_correlation": true,
24+
"misp-attribute": "link",
25+
"multiple": true,
26+
"ui-priority": 1
27+
},
28+
"threat": {
29+
"categories": [
30+
"Attribution",
31+
"Payload type"
32+
],
33+
"description": "threat actor or malware",
34+
"misp-attribute": "text",
35+
"ui-priority": 1
36+
}
37+
},
38+
"description": "List of C2-servers with common ground, e.g. extracted from a blog post or ransomware analysis",
39+
"meta-category": "network",
40+
"name": "c2-list",
41+
"required": [
42+
"threat"
43+
],
44+
"requiredOneOf": [
45+
"c2-ipport",
46+
"c2-ip"
47+
],
48+
"uuid": "12456351-ceb7-4d43-9a7e-d2275d8b5785",
49+
"version": 20230919
50+
}

objects/user-account/definition.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -55,6 +55,12 @@
5555
"misp-attribute": "text",
5656
"ui-priority": 1
5757
},
58+
"email": {
59+
"description": "Email addresses for the account.",
60+
"misp-attribute": "email",
61+
"multiple": true,
62+
"ui-priority": 1
63+
},
5864
"expires": {
5965
"description": "Expiration time of the account",
6066
"disable_correlation": true,

0 commit comments

Comments
 (0)