Skip to content

Commit fa2973b

Browse files
feat(crowdsec): Add attributes to crowdsec-ip-context object
1 parent 62bc75e commit fa2973b

1 file changed

Lines changed: 22 additions & 2 deletions

File tree

objects/crowdsec-ip-context/definition.json

Lines changed: 22 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@
2929
"ui-priority": 1
3030
},
3131
"background-noise": {
32-
"description": "Background noise",
32+
"description": "High background noise scores highlight untargeted, mild threat mass-attacks",
3333
"disable_correlation": true,
3434
"misp-attribute": "float",
3535
"ui-priority": 1
@@ -66,6 +66,13 @@
6666
"misp-attribute": "text",
6767
"ui-priority": 0
6868
},
69+
"cves": {
70+
"description": "CVEs exploited by the observed IP",
71+
"disable_correlation": true,
72+
"misp-attribute": "text",
73+
"multiple": true,
74+
"ui-priority": 1
75+
},
6976
"dst-port": {
7077
"categories": [
7178
"Network activity",
@@ -124,6 +131,19 @@
124131
"misp-attribute": "float",
125132
"ui-priority": 1
126133
},
134+
"mitre-techniques": {
135+
"description": "MITRE ATT&CK techniques used by the observed IP",
136+
"disable_correlation": true,
137+
"misp-attribute": "text",
138+
"multiple": true,
139+
"ui-priority": 1
140+
},
141+
"reputation": {
142+
"description": "Real-time, actionable IP reputation score derived from trusted reports and consensus-validated data in CrowdSec CTI",
143+
"disable_correlation": true,
144+
"misp-attribute": "text",
145+
"ui-priority": 1
146+
},
127147
"reverse-dns": {
128148
"categories": [
129149
"Network activity",
@@ -159,5 +179,5 @@
159179
"ip"
160180
],
161181
"uuid": "0f0a6def-a351-4d3b-9868-d732f6f4666f",
162-
"version": 3
182+
"version": 4
163183
}

0 commit comments

Comments
 (0)