You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
-[objects/bank-account](objects/bank-account/definition.json) - An object describing bank account information based on account description from goAML 4.0.
119
-
-[objects/bgp-ranking](objects/bgp-ranking/definition.json) - An object to link to an asn object to represent the ranking of the Autonomous System for a given day.
120
119
-[objects/bgp-hijack](objects/bgp-hijack/definition.json) - Object encapsulating BGP Hijack description as specified, for example, by bgpstream.com.
120
+
-[objects/bgp-ranking](objects/bgp-ranking/definition.json) - BGP Ranking object describing the ranking of an ASN for a given day, along with its position, 1 being the most malicious ASN of the day, with the highest ranking. This object is meant to have a relationship with the corresponding ASN object and represents its ranking for a specific date.
121
121
-[objects/blog](objects/blog/definition.json) - Blog post like Medium or WordPress.
122
122
-[objects/boleto](objects/boleto/definition.json) - A common form of payment used in Brazil.
123
123
-[objects/btc-transaction](objects/btc-transaction/definition.json) - An object to describe a Bitcoin transaction. Best to be used with bitcoin-wallet.
@@ -145,7 +145,7 @@ for a specific attribute. An optional **to_ids** boolean field to disable the ID
145
145
-[objects/ddos](objects/ddos/definition.json) - DDoS object describes a current DDoS activity from a specific or/and to a specific target. Type of DDoS can be attached to the object as a taxonomy.
146
146
-[objects/device](objects/device/definition.json) - An object to define a device.
147
147
-[objects/diameter-attack](objects/diameter-attack/definition.json) - Attack as seen on diameter authentication against a GSM, UMTS or LTE network.
148
-
-[objects/dns-record](objects/dns-record/definition.json) - A set of dns records observed for a specific domain.
148
+
-[objects/dns-record](objects/dns-record/definition.json) - A set of DNS records observed for a specific domain.
149
149
-[objects/domain-crawled](objects/domain-crawled/definition.json) - A domain crawled over time.
150
150
-[objects/domain-ip](objects/domain-ip/definition.json) - A domain and IP address seen as a tuple in a specific time frame.
151
151
-[objects/elf](objects/elf/definition.json) - Object describing a Executable and Linkable Format.
@@ -217,6 +217,7 @@ for a specific attribute. An optional **to_ids** boolean field to disable the ID
-[objects/gtp-attack](objects/gtp-attack/definition.json) - GTP attack object as seen on a GSM, UMTS or LTE network.
221
222
-[objects/http-request](objects/http-request/definition.json) - A single HTTP request header.
222
223
-[objects/ilr-impact](objects/ilr-impact/definition.json) - Institut Luxembourgeois de Regulation - Impact.
@@ -226,6 +227,7 @@ for a specific attribute. An optional **to_ids** boolean field to disable the ID
226
227
-[objects/imsi-catcher](objects/imsi-catcher/definition.json) - IMSI Catcher entry object based on the open source IMSI cather.
227
228
-[objects/instant-message](objects/instant-message/definition.json) - Instant Message (IM) object template describing one or more IM message.
228
229
-[objects/instant-message-group](objects/instant-message-group/definition.json) - Instant Message (IM) group object template describing a public or private IM group, channel or conversation.
-[objects/internal-reference](objects/internal-reference/definition.json) - Internal reference.
@@ -236,6 +238,7 @@ for a specific attribute. An optional **to_ids** boolean field to disable the ID
236
238
-[objects/ip-port](objects/ip-port/definition.json) - An IP address (or domain or hostname) and a port seen as a tuple (or as a triple) in a specific time frame.
237
239
-[objects/irc](objects/irc/definition.json) - An IRC object to describe an IRC server and the associated channels.
238
240
-[objects/ja3](objects/ja3/definition.json) - JA3 is a new technique for creating SSL client fingerprints that are easy to produce and can be easily shared for threat intelligence. Fingerprints are composed of Client Hello packet; SSL Version, Accepted Ciphers, List of Extensions, Elliptic Curves, and Elliptic Curve Formats. https://github.com/salesforce/ja3.
241
+
-[objects/keybase-account](objects/keybase-account/definition.json) - Information related to a keybase account, from API Users Object.
239
242
-[objects/leaked-document](objects/leaked-document/definition.json) - Object describing a leaked document.
240
243
-[objects/legal-entity](objects/legal-entity/definition.json) - An object to describe a legal entity.
241
244
-[objects/lnk](objects/lnk/definition.json) - LNK object describing a Windows LNK binary file (aka Windows shortcut).
0 commit comments