misp-objects/objects/malicious-website/definition.json at f058b83fb8c9abf03dc6b7889f941325299500a5 · MISP/misp-objects · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
{
    "attributes": {
        "domain": {
            "description": "Malicious website",
            "disable_correlation": false,
            "misp-attribute": "domain",
            "multiple": false,
            "ui-priority": 1
        },
        "last seen": {
            "description": "Last seen",
            "misp-attribute": "datetime",
            "multiple": false,
            "ui-priority": 1
        },
        "first seen": {
            "description": "First seen",
            "misp-attribute": "datetime",
            "multiple": false,
            "ui-priority": 1
        },
        "reason": {
            "description": "Reason",
            "disable_correlation": false,
            "misp-attribute": "text",
            "ui-priority": 1
        },
        "source": {
            "description": "Intel source",
            "disable_correlation": true,
            "misp-attribute": "text",
            "ui-priority": 1
        }
    },
    "description": "A generic object for malicious websites",
    "meta-category": "network",
    "name": "malicious-website",
    "requiredOneOf": [
        "domain"
    ],
    "uuid": "64da5ea8-886d-4946-b414-a351c83146d4",
    "version": 1
}