Skip to content

Commit 99968e0

Browse files
adulauadulau
committed
Merge branch 'mhpcchaves-mhpcchaves-network-data'
2 parents ffbac0c + 65e073d commit 99968e0

1 file changed

Lines changed: 167 additions & 0 deletions

File tree

‎objects/network-data/definition.json‎

Lines changed: 167 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,167 @@
1+
{
2+
"attributes": {
3+
"counter": {
4+
"description": "counter (ex.: bytes, packets, flows, events, etc)",
5+
"disable_correlation": true,
6+
"misp-attribute": "counter",
7+
"multiple": true,
8+
"ui-priority": 3
9+
},
10+
"data": {
11+
"description": "network traffic (ex.: payload, log lines, etc)",
12+
"disable_correlation": true,
13+
"misp-attribute": "text",
14+
"multiple": true,
15+
"ui-priority": 0
16+
},
17+
"description": {
18+
"categories": [
19+
"Network activity",
20+
"External analysis"
21+
],
22+
"description": "describe type/content of the network data",
23+
"disable_correlation": true,
24+
"misp-attribute": "text",
25+
"multiple": true,
26+
"ui-priority": 15
27+
},
28+
"dst_ASN": {
29+
"categories": [
30+
"Network activity",
31+
"External analysis"
32+
],
33+
"description": "destination autonomous system number",
34+
"disable_correlation": true,
35+
"misp-attribute": "AS",
36+
"multiple": true,
37+
"ui-priority": 8
38+
},
39+
"dst_CC": {
40+
"categories": [
41+
"Network activity",
42+
"External analysis"
43+
],
44+
"description": "destination country code",
45+
"disable_correlation": true,
46+
"misp-attribute": "text",
47+
"multiple": true,
48+
"ui-priority": 9
49+
},
50+
"dst_IP": {
51+
"categories": [
52+
"Network activity",
53+
"External analysis"
54+
],
55+
"description": "destination IP address",
56+
"misp-attribute": "ip-dst",
57+
"multiple": true,
58+
"ui-priority": 7
59+
},
60+
"dst_hostname": {
61+
"categories": [
62+
"Network activity",
63+
"External analysis"
64+
],
65+
"description": "destination hostname",
66+
"misp-attribute": "hostname",
67+
"multiple": true,
68+
"ui-priority": 5
69+
},
70+
"dst_port": {
71+
"categories": [
72+
"Network activity",
73+
"External analysis"
74+
],
75+
"description": "destination port",
76+
"disable_correlation": true,
77+
"misp-attribute": "port",
78+
"multiple": true,
79+
"ui-priority": 6
80+
},
81+
"first_seen": {
82+
"description": "timestamp of the first data seen",
83+
"disable_correlation": true,
84+
"misp-attribute": "datetime",
85+
"ui-priority": 2
86+
},
87+
"last_seen": {
88+
"description": "timestamp of the last data seen",
89+
"disable_correlation": true,
90+
"misp-attribute": "datetime",
91+
"ui-priority": 1
92+
},
93+
"protocol": {
94+
"categories": [
95+
"Network activity",
96+
"External analysis"
97+
],
98+
"description": "protocol (ex.: TCP, UDP, ICMP, TLS, HTTP, HTTPS, SIP, etc)",
99+
"disable_correlation": true,
100+
"misp-attribute": "text",
101+
"multiple": true,
102+
"ui-priority": 4
103+
},
104+
"src_ASN": {
105+
"categories": [
106+
"Network activity",
107+
"External analysis"
108+
],
109+
"description": "source autonomous system number",
110+
"disable_correlation": true,
111+
"misp-attribute": "AS",
112+
"multiple": true,
113+
"ui-priority": 13
114+
},
115+
"src_CC": {
116+
"categories": [
117+
"Network activity",
118+
"External analysis"
119+
],
120+
"description": "source country code",
121+
"disable_correlation": true,
122+
"misp-attribute": "text",
123+
"multiple": true,
124+
"ui-priority": 14
125+
},
126+
"src_IP": {
127+
"categories": [
128+
"Network activity",
129+
"External analysis"
130+
],
131+
"description": "source IP address",
132+
"misp-attribute": "ip-src",
133+
"multiple": true,
134+
"ui-priority": 12
135+
},
136+
"src_hostname": {
137+
"categories": [
138+
"Network activity",
139+
"External analysis"
140+
],
141+
"description": "source hostname",
142+
"misp-attribute": "hostname",
143+
"multiple": true,
144+
"ui-priority": 10
145+
},
146+
"src_port": {
147+
"categories": [
148+
"Network activity",
149+
"External analysis"
150+
],
151+
"description": "source port",
152+
"disable_correlation": true,
153+
"misp-attribute": "port",
154+
"multiple": true,
155+
"ui-priority": 11
156+
}
157+
},
158+
"description": "network data, including payloads/logs, relevant timestamps, data volume and enrichment of the TCP/IP 5-tuple connection information.",
159+
"meta-category": "network",
160+
"name": "network-data",
161+
"requiredOneOf": [
162+
"src_IP",
163+
"data"
164+
],
165+
"uuid": "64d5949b-98ac-459d-83b8-4688f45795de",
166+
"version": 2
167+
}

0 commit comments

Comments
 (0)