Skip to content

Commit ece467c

Browse files
adulauadulau
authored
Merge pull request #505 from MISP/codex/add-generic-objects-for-physical-items
Add generic physical-object and physical-item MISP templates
2 parents 74e982b + 11996a9 commit ece467c

2 files changed

Lines changed: 264 additions & 0 deletions

File tree

‎objects/physical-item/definition.json‎

Lines changed: 112 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,112 @@
1+
{
2+
"attributes": {
3+
"case-number": {
4+
"description": "Case number associated with this item.",
5+
"misp-attribute": "text",
6+
"ui-priority": 1
7+
},
8+
"collection-date": {
9+
"description": "Date when the item was collected.",
10+
"disable_correlation": true,
11+
"misp-attribute": "datetime",
12+
"ui-priority": 2
13+
},
14+
"collector": {
15+
"description": "Person or unit that collected the item.",
16+
"disable_correlation": true,
17+
"misp-attribute": "text",
18+
"ui-priority": 2
19+
},
20+
"currency": {
21+
"description": "Currency used for estimated value.",
22+
"disable_correlation": true,
23+
"misp-attribute": "text",
24+
"sane_default": [
25+
"EUR",
26+
"USD",
27+
"GBP",
28+
"CHF",
29+
"JPY",
30+
"other"
31+
],
32+
"ui-priority": 0
33+
},
34+
"description": {
35+
"description": "Narrative description of the item.",
36+
"disable_correlation": true,
37+
"misp-attribute": "text",
38+
"ui-priority": 10
39+
},
40+
"estimated-value": {
41+
"description": "Estimated monetary value of the item.",
42+
"disable_correlation": true,
43+
"misp-attribute": "float",
44+
"ui-priority": 0
45+
},
46+
"item-number": {
47+
"description": "Unique item number as listed by an analyst.",
48+
"misp-attribute": "text",
49+
"ui-priority": 10
50+
},
51+
"item-picture": {
52+
"description": "Picture or scan of the item.",
53+
"misp-attribute": "attachment",
54+
"multiple": true,
55+
"ui-priority": 4
56+
},
57+
"item-status": {
58+
"description": "Current handling status of the item.",
59+
"disable_correlation": true,
60+
"misp-attribute": "text",
61+
"sane_default": [
62+
"collected",
63+
"in-analysis",
64+
"stored",
65+
"transferred",
66+
"returned",
67+
"destroyed",
68+
"unknown"
69+
],
70+
"ui-priority": 3
71+
},
72+
"owner": {
73+
"description": "Known owner or possessor of the item.",
74+
"disable_correlation": true,
75+
"misp-attribute": "text",
76+
"ui-priority": 1
77+
},
78+
"packaging": {
79+
"description": "How the item is packaged or sealed.",
80+
"disable_correlation": true,
81+
"misp-attribute": "text",
82+
"ui-priority": 2
83+
},
84+
"recovered-from": {
85+
"description": "Place, object, or person from which the item was recovered.",
86+
"disable_correlation": true,
87+
"misp-attribute": "text",
88+
"ui-priority": 4
89+
},
90+
"seal-number": {
91+
"description": "Seal or evidence bag number used for custody.",
92+
"misp-attribute": "text",
93+
"multiple": true,
94+
"ui-priority": 2
95+
},
96+
"storage-location": {
97+
"description": "Current storage location of the item.",
98+
"disable_correlation": true,
99+
"misp-attribute": "text",
100+
"ui-priority": 1
101+
}
102+
},
103+
"description": "A generic item object for analysts to track collection, custody, and contextual details of a physical item.",
104+
"meta-category": "misc",
105+
"name": "physical-item",
106+
"required": [
107+
"item-number",
108+
"description"
109+
],
110+
"uuid": "9d239b58-0be6-410f-836d-6634802f08ca",
111+
"version": 1
112+
}

‎objects/physical-object/definition.json‎

Lines changed: 152 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,152 @@
1+
{
2+
"attributes": {
3+
"acquisition-date": {
4+
"description": "Date when the object was acquired or seized.",
5+
"disable_correlation": true,
6+
"misp-attribute": "datetime",
7+
"ui-priority": 1
8+
},
9+
"barcode": {
10+
"description": "Barcode value associated with the object.",
11+
"misp-attribute": "text",
12+
"multiple": true,
13+
"ui-priority": 3
14+
},
15+
"brand": {
16+
"description": "Manufacturer or commercial brand of the object.",
17+
"disable_correlation": true,
18+
"misp-attribute": "text",
19+
"ui-priority": 4
20+
},
21+
"color": {
22+
"description": "Color(s) of the object.",
23+
"disable_correlation": true,
24+
"misp-attribute": "text",
25+
"multiple": true,
26+
"ui-priority": 5
27+
},
28+
"condition": {
29+
"description": "Observed condition of the object.",
30+
"disable_correlation": true,
31+
"misp-attribute": "text",
32+
"sane_default": [
33+
"new",
34+
"used",
35+
"damaged",
36+
"modified",
37+
"destroyed",
38+
"unknown"
39+
],
40+
"ui-priority": 6
41+
},
42+
"description": {
43+
"description": "Narrative description of the physical object.",
44+
"disable_correlation": true,
45+
"misp-attribute": "text",
46+
"ui-priority": 0
47+
},
48+
"dimensions": {
49+
"description": "Dimensions of the object (for example LxWxH and unit).",
50+
"disable_correlation": true,
51+
"misp-attribute": "text",
52+
"ui-priority": 8
53+
},
54+
"estimated-value": {
55+
"description": "Estimated value of the object in the specified currency.",
56+
"disable_correlation": true,
57+
"misp-attribute": "float",
58+
"ui-priority": 9
59+
},
60+
"identifier": {
61+
"description": "Internal identifier assigned by an analyst or team.",
62+
"misp-attribute": "text",
63+
"multiple": true,
64+
"ui-priority": 1
65+
},
66+
"location-found": {
67+
"description": "Location where the object was observed or recovered.",
68+
"disable_correlation": true,
69+
"misp-attribute": "text",
70+
"ui-priority": 2
71+
},
72+
"material": {
73+
"description": "Main material(s) of the object.",
74+
"disable_correlation": true,
75+
"misp-attribute": "text",
76+
"multiple": true,
77+
"ui-priority": 7
78+
},
79+
"model": {
80+
"description": "Model name or model number.",
81+
"disable_correlation": true,
82+
"misp-attribute": "text",
83+
"ui-priority": 4
84+
},
85+
"name": {
86+
"description": "Short name used to identify the object.",
87+
"disable_correlation": true,
88+
"misp-attribute": "text",
89+
"ui-priority": 10
90+
},
91+
"object-picture": {
92+
"description": "Photograph or scan of the object.",
93+
"misp-attribute": "attachment",
94+
"multiple": true,
95+
"ui-priority": 3
96+
},
97+
"object-type": {
98+
"description": "Type or class of physical object.",
99+
"disable_correlation": true,
100+
"misp-attribute": "text",
101+
"sane_default": [
102+
"document",
103+
"identity-item",
104+
"electronic-device",
105+
"weapon",
106+
"tool",
107+
"vehicle-part",
108+
"clothing",
109+
"container",
110+
"key",
111+
"currency",
112+
"other"
113+
],
114+
"ui-priority": 10
115+
},
116+
"quantity": {
117+
"description": "Number of identical objects.",
118+
"disable_correlation": true,
119+
"misp-attribute": "counter",
120+
"ui-priority": 8
121+
},
122+
"rfid": {
123+
"description": "RFID value associated with the object.",
124+
"misp-attribute": "text",
125+
"multiple": true,
126+
"ui-priority": 3
127+
},
128+
"serial-number": {
129+
"description": "Serial number or manufacturer identifier.",
130+
"misp-attribute": "text",
131+
"multiple": true,
132+
"ui-priority": 5
133+
},
134+
"weight": {
135+
"description": "Weight of the object with unit.",
136+
"disable_correlation": true,
137+
"misp-attribute": "text",
138+
"ui-priority": 8
139+
}
140+
},
141+
"description": "A generic object to describe a physical object recovered, observed, or seized in an investigation.",
142+
"meta-category": "misc",
143+
"name": "physical-object",
144+
"requiredOneOf": [
145+
"name",
146+
"description",
147+
"serial-number",
148+
"identifier"
149+
],
150+
"uuid": "dc786f86-4a8f-4da9-82d1-130fcefc1453",
151+
"version": 1
152+
}

0 commit comments

Comments
 (0)