pymisp 2.5.7__py3-none-any.whl → 2.5.8__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of pymisp might be problematic. Click here for more details.

Files changed (135) hide show
  1. pymisp/api.py +1 -0
  2. pymisp/data/misp-objects/objects/rmm/definition.json +1 -1
  3. {pymisp-2.5.7.dist-info → pymisp-2.5.8.dist-info}/METADATA +4 -4
  4. {pymisp-2.5.7.dist-info → pymisp-2.5.8.dist-info}/RECORD +6 -135
  5. CHANGELOG.txt +0 -5380
  6. examples/__init__.py +0 -0
  7. examples/add_attributes_from_csv.py +0 -74
  8. examples/add_email_object.py +0 -29
  9. examples/add_fail2ban_object.py +0 -86
  10. examples/add_feed.py +0 -25
  11. examples/add_file_object.py +0 -47
  12. examples/add_filetype_object_from_csv.py +0 -53
  13. examples/add_generic_object.py +0 -26
  14. examples/add_github_user.py +0 -65
  15. examples/add_gitlab_user.py +0 -56
  16. examples/add_named_attribute.py +0 -25
  17. examples/add_organisations.py +0 -57
  18. examples/add_ssh_authorized_keys.py +0 -29
  19. examples/add_user.py +0 -22
  20. examples/add_vehicle_object.py +0 -22
  21. examples/addtag2.py +0 -45
  22. examples/asciidoc_generator.py +0 -114
  23. examples/cache_all.py +0 -10
  24. examples/copyTagsFromAttributesToEvent.py +0 -68
  25. examples/copy_list.py +0 -93
  26. examples/create_events.py +0 -26
  27. examples/cytomic_orion.py +0 -549
  28. examples/del.py +0 -22
  29. examples/delete_user.py +0 -16
  30. examples/edit_organisation.py +0 -20
  31. examples/edit_user.py +0 -20
  32. examples/falsepositive_disabletoids.py +0 -136
  33. examples/fetch_events_feed.py +0 -15
  34. examples/fetch_warninglist_hits.py +0 -38
  35. examples/freetext.py +0 -22
  36. examples/generate_file_objects.py +0 -78
  37. examples/generate_meta_feed.py +0 -15
  38. examples/get.py +0 -37
  39. examples/get_csv.py +0 -37
  40. examples/get_network_activity.py +0 -187
  41. examples/last.py +0 -48
  42. examples/load_csv.py +0 -94
  43. examples/lookup.py +0 -28
  44. examples/misp2cef.py +0 -71
  45. examples/misp2clamav.py +0 -52
  46. examples/openioc_to_misp.py +0 -27
  47. examples/proofpoint_tap.py +0 -203
  48. examples/proofpoint_vap.py +0 -65
  49. examples/search.py +0 -48
  50. examples/search_attributes_yara.py +0 -40
  51. examples/search_sighting.py +0 -42
  52. examples/server_sync_check_conn.py +0 -32
  53. examples/sharing_groups.py +0 -15
  54. examples/show_sightings.py +0 -168
  55. examples/stats_report.py +0 -405
  56. examples/sync_sighting.py +0 -171
  57. examples/tags.py +0 -25
  58. examples/test_sign.py +0 -19
  59. examples/trustar_misp.py +0 -59
  60. examples/up.py +0 -21
  61. examples/upload.py +0 -60
  62. examples/users_list.py +0 -15
  63. examples/vmray_automation.py +0 -281
  64. examples/vt_to_misp.py +0 -182
  65. examples/warninglists.py +0 -22
  66. examples/yara.py +0 -38
  67. examples/yara_dump.py +0 -98
  68. tests/57c4445b-c548-4654-af0b-4be3950d210f.json +0 -1
  69. tests/__init__.py +0 -0
  70. tests/csv_testfiles/invalid_fieldnames.csv +0 -11
  71. tests/csv_testfiles/valid_fieldnames.csv +0 -4
  72. tests/email_testfiles/mail_1.eml.zip +0 -0
  73. tests/email_testfiles/mail_1.msg +0 -0
  74. tests/email_testfiles/mail_1_bom.eml +0 -858
  75. tests/email_testfiles/mail_1_headers_only.eml +0 -28
  76. tests/email_testfiles/mail_2.eml +0 -32
  77. tests/email_testfiles/mail_3.eml +0 -170
  78. tests/email_testfiles/mail_3.msg +0 -0
  79. tests/email_testfiles/mail_4.msg +0 -0
  80. tests/email_testfiles/mail_5.msg +0 -0
  81. tests/email_testfiles/mail_multiple_to.eml +0 -15
  82. tests/email_testfiles/source +0 -1
  83. tests/git-vuln-finder-quagga.json +0 -1493
  84. tests/misp_event.json +0 -76
  85. tests/mispevent_testfiles/attribute.json +0 -21
  86. tests/mispevent_testfiles/attribute_del.json +0 -23
  87. tests/mispevent_testfiles/def_param.json +0 -53
  88. tests/mispevent_testfiles/event.json +0 -8
  89. tests/mispevent_testfiles/event_obj_attr_tag.json +0 -57
  90. tests/mispevent_testfiles/event_obj_def_param.json +0 -62
  91. tests/mispevent_testfiles/event_obj_tag.json +0 -29
  92. tests/mispevent_testfiles/event_tags.json +0 -18
  93. tests/mispevent_testfiles/existing_event.json +0 -4599
  94. tests/mispevent_testfiles/existing_event_edited.json +0 -4601
  95. tests/mispevent_testfiles/galaxy.json +0 -25
  96. tests/mispevent_testfiles/malware.json +0 -19
  97. tests/mispevent_testfiles/malware_exist.json +0 -163
  98. tests/mispevent_testfiles/misp_custom_obj.json +0 -38
  99. tests/mispevent_testfiles/overwrite_file/definition.json +0 -457
  100. tests/mispevent_testfiles/proposals.json +0 -35
  101. tests/mispevent_testfiles/shadow.json +0 -148
  102. tests/mispevent_testfiles/sighting.json +0 -5
  103. tests/mispevent_testfiles/simple.json +0 -2
  104. tests/mispevent_testfiles/test_object_template/definition.json +0 -29
  105. tests/new_misp_event.json +0 -34
  106. tests/reportlab_testfiles/HTML_event.json +0 -1
  107. tests/reportlab_testfiles/galaxy_1.json +0 -1250
  108. tests/reportlab_testfiles/image_event.json +0 -2490
  109. tests/reportlab_testfiles/japanese_test.json +0 -156
  110. tests/reportlab_testfiles/japanese_test_heavy.json +0 -318
  111. tests/reportlab_testfiles/long_event.json +0 -3730
  112. tests/reportlab_testfiles/mainly_objects_1.json +0 -1092
  113. tests/reportlab_testfiles/mainly_objects_2.json +0 -977
  114. tests/reportlab_testfiles/sighting_1.json +0 -305
  115. tests/reportlab_testfiles/sighting_2.json +0 -221
  116. tests/reportlab_testfiles/to_delete1.json +0 -804
  117. tests/reportlab_testfiles/to_delete2.json +0 -1
  118. tests/reportlab_testfiles/to_delete3.json +0 -1
  119. tests/reportlab_testfiles/very_long_event.json +0 -1006
  120. tests/reportlab_testoutputs/to_delete1.json.pdf +0 -391
  121. tests/reportlab_testoutputs/to_delete2.json.pdf +0 -506
  122. tests/reportlab_testoutputs/to_delete3.json.pdf +0 -277
  123. tests/search_index_result.json +0 -69
  124. tests/sharing_groups.json +0 -98
  125. tests/stix1.xml-utf8 +0 -110
  126. tests/stix2.json +0 -1
  127. tests/test_analyst_data.py +0 -123
  128. tests/test_emailobject.py +0 -157
  129. tests/test_fileobject.py +0 -20
  130. tests/test_mispevent.py +0 -473
  131. tests/test_reportlab.py +0 -431
  132. tests/testlive_comprehensive.py +0 -3734
  133. tests/testlive_sync.py +0 -474
  134. {pymisp-2.5.7.dist-info → pymisp-2.5.8.dist-info}/LICENSE +0 -0
  135. {pymisp-2.5.7.dist-info → pymisp-2.5.8.dist-info}/WHEEL +0 -0
@@ -1,457 +0,0 @@
1
- {
2
- "requiredOneOf": [
3
- "filename",
4
- "size-in-bytes",
5
- "authentihash",
6
- "ssdeep",
7
- "md5",
8
- "sha1",
9
- "sha224",
10
- "sha256",
11
- "sha384",
12
- "sha512",
13
- "sha512/224",
14
- "sha512/256",
15
- "tlsh",
16
- "pattern-in-file",
17
- "certificate",
18
- "malware-sample",
19
- "attachment",
20
- "path",
21
- "fullpath"
22
- ],
23
- "required": [
24
- "test_overwrite"
25
- ],
26
- "attributes": {
27
- "test_overwrite": {
28
- "description": "Test attribute",
29
- "misp-attribute": "text"
30
- },
31
- "md5": {
32
- "description": "[Insecure] MD5 hash (128 bits)",
33
- "ui-priority": 1,
34
- "misp-attribute": "md5",
35
- "recommended": false
36
- },
37
- "sha1": {
38
- "description": "[Insecure] Secure Hash Algorithm 1 (160 bits)",
39
- "ui-priority": 1,
40
- "misp-attribute": "sha1",
41
- "recommended": false
42
- },
43
- "sha224": {
44
- "description": "Secure Hash Algorithm 2 (224 bits)",
45
- "ui-priority": 0,
46
- "misp-attribute": "sha224",
47
- "recommended": false
48
- },
49
- "sha256": {
50
- "description": "Secure Hash Algorithm 2 (256 bits)",
51
- "ui-priority": 1,
52
- "misp-attribute": "sha256"
53
- },
54
- "sha384": {
55
- "description": "Secure Hash Algorithm 2 (384 bits)",
56
- "ui-priority": 0,
57
- "misp-attribute": "sha384",
58
- "recommended": false
59
- },
60
- "sha512": {
61
- "description": "Secure Hash Algorithm 2 (512 bits)",
62
- "ui-priority": 1,
63
- "misp-attribute": "sha512"
64
- },
65
- "sha512/224": {
66
- "description": "Secure Hash Algorithm 2 (224 bits)",
67
- "ui-priority": 0,
68
- "misp-attribute": "sha512/224",
69
- "recommended": false
70
- },
71
- "sha512/256": {
72
- "description": "Secure Hash Algorithm 2 (256 bits)",
73
- "ui-priority": 0,
74
- "misp-attribute": "sha512/256",
75
- "recommended": false
76
- },
77
- "ssdeep": {
78
- "description": "Fuzzy hash using context triggered piecewise hashes (CTPH)",
79
- "ui-priority": 0,
80
- "misp-attribute": "ssdeep"
81
- },
82
- "authentihash": {
83
- "description": "Authenticode executable signature hash",
84
- "ui-priority": 0,
85
- "misp-attribute": "authentihash",
86
- "recommended": false
87
- },
88
- "size-in-bytes": {
89
- "description": "Size of the file, in bytes",
90
- "disable_correlation": true,
91
- "ui-priority": 0,
92
- "misp-attribute": "size-in-bytes"
93
- },
94
- "entropy": {
95
- "description": "Entropy of the whole file",
96
- "disable_correlation": true,
97
- "ui-priority": 1,
98
- "misp-attribute": "float"
99
- },
100
- "pattern-in-file": {
101
- "description": "Pattern that can be found in the file",
102
- "categories": [
103
- "Artifacts dropped",
104
- "Payload installation",
105
- "External analysis"
106
- ],
107
- "ui-priority": 1,
108
- "misp-attribute": "pattern-in-file",
109
- "multiple": true
110
- },
111
- "text": {
112
- "description": "Free text value to attach to the file",
113
- "disable_correlation": true,
114
- "ui-priority": 1,
115
- "misp-attribute": "text",
116
- "recommended": false
117
- },
118
- "malware-sample": {
119
- "description": "The file itself (binary)",
120
- "ui-priority": 1,
121
- "misp-attribute": "malware-sample"
122
- },
123
- "attachment": {
124
- "description": "A non-malicious file.",
125
- "ui-priority": 1,
126
- "misp-attribute": "attachment"
127
- },
128
- "filename": {
129
- "description": "Filename on disk",
130
- "disable_correlation": true,
131
- "multiple": true,
132
- "categories": [
133
- "Payload delivery",
134
- "Artifacts dropped",
135
- "Payload installation",
136
- "External analysis"
137
- ],
138
- "ui-priority": 1,
139
- "misp-attribute": "filename"
140
- },
141
- "path": {
142
- "description": "Path of the filename complete or partial",
143
- "disable_correlation": true,
144
- "multiple": true,
145
- "ui-priority": 0,
146
- "misp-attribute": "text"
147
- },
148
- "fullpath": {
149
- "description": "Complete path of the filename including the filename",
150
- "multiple": true,
151
- "ui-priority": 0,
152
- "misp-attribute": "text"
153
- },
154
- "tlsh": {
155
- "description": "Fuzzy hash by Trend Micro: Locality Sensitive Hash",
156
- "ui-priority": 0,
157
- "misp-attribute": "tlsh"
158
- },
159
- "certificate": {
160
- "description": "Certificate value if the binary is signed with another authentication scheme than authenticode",
161
- "ui-priority": 0,
162
- "misp-attribute": "x509-fingerprint-sha1"
163
- },
164
- "mimetype": {
165
- "description": "Mime type",
166
- "disable_correlation": true,
167
- "ui-priority": 0,
168
- "misp-attribute": "mime-type"
169
- },
170
- "state": {
171
- "misp-attribute": "text",
172
- "ui-priority": 0,
173
- "description": "State of the file",
174
- "multiple": true,
175
- "disable_correlation": true,
176
- "values_list": [
177
- "Malicious",
178
- "Harmless",
179
- "Signed",
180
- "Revoked",
181
- "Expired",
182
- "Trusted"
183
- ]
184
- },
185
- "file-encoding": {
186
- "misp-attribute": "text",
187
- "ui-priority": 0,
188
- "description": "Encoding format of the file",
189
- "disable_correlation": true,
190
- "sane_default": [
191
- "Adobe-Standard-Encoding",
192
- "Adobe-Symbol-Encoding",
193
- "Amiga-1251",
194
- "ANSI_X3.110-1983",
195
- "ASMO_449",
196
- "Big5",
197
- "Big5-HKSCS",
198
- "BOCU-1",
199
- "BRF",
200
- "BS_4730",
201
- "BS_viewdata",
202
- "CESU-8",
203
- "CP50220",
204
- "CP51932",
205
- "CSA_Z243.4-1985-1",
206
- "CSA_Z243.4-1985-2",
207
- "CSA_Z243.4-1985-gr",
208
- "CSN_369103",
209
- "DEC-MCS",
210
- "DIN_66003",
211
- "dk-us",
212
- "DS_2089",
213
- "EBCDIC-AT-DE",
214
- "EBCDIC-AT-DE-A",
215
- "EBCDIC-CA-FR",
216
- "EBCDIC-DK-NO",
217
- "EBCDIC-DK-NO-A",
218
- "EBCDIC-ES",
219
- "EBCDIC-ES-A",
220
- "EBCDIC-ES-S",
221
- "EBCDIC-FI-SE",
222
- "EBCDIC-FI-SE-A",
223
- "EBCDIC-FR",
224
- "EBCDIC-IT",
225
- "EBCDIC-PT",
226
- "EBCDIC-UK",
227
- "EBCDIC-US",
228
- "ECMA-cyrillic",
229
- "ES",
230
- "ES2",
231
- "EUC-KR",
232
- "Extended_UNIX_Code_Fixed_Width_for_Japanese",
233
- "Extended_UNIX_Code_Packed_Format_for_Japanese",
234
- "GB18030",
235
- "GB_1988-80",
236
- "GB2312",
237
- "GB_2312-80",
238
- "GBK",
239
- "GOST_19768-74",
240
- "greek7",
241
- "greek7-old",
242
- "greek-ccitt",
243
- "HP-DeskTop",
244
- "HP-Legal",
245
- "HP-Math8",
246
- "HP-Pi-font",
247
- "hp-roman8",
248
- "HZ-GB-2312",
249
- "IBM00858",
250
- "IBM00924",
251
- "IBM01140",
252
- "IBM01141",
253
- "IBM01142",
254
- "IBM01143",
255
- "IBM01144",
256
- "IBM01145",
257
- "IBM01146",
258
- "IBM01147",
259
- "IBM01148",
260
- "IBM01149",
261
- "IBM037",
262
- "IBM038",
263
- "IBM1026",
264
- "IBM1047",
265
- "IBM273",
266
- "IBM274",
267
- "IBM275",
268
- "IBM277",
269
- "IBM278",
270
- "IBM280",
271
- "IBM281",
272
- "IBM284",
273
- "IBM285",
274
- "IBM290",
275
- "IBM297",
276
- "IBM420",
277
- "IBM423",
278
- "IBM424",
279
- "IBM437",
280
- "IBM500",
281
- "IBM775",
282
- "IBM850",
283
- "IBM851",
284
- "IBM852",
285
- "IBM855",
286
- "IBM857",
287
- "IBM860",
288
- "IBM861",
289
- "IBM862",
290
- "IBM863",
291
- "IBM864",
292
- "IBM865",
293
- "IBM866",
294
- "IBM868",
295
- "IBM869",
296
- "IBM870",
297
- "IBM871",
298
- "IBM880",
299
- "IBM891",
300
- "IBM903",
301
- "IBM904",
302
- "IBM905",
303
- "IBM918",
304
- "IBM-Symbols",
305
- "IBM-Thai",
306
- "IEC_P27-1",
307
- "INIS",
308
- "INIS-8",
309
- "INIS-cyrillic",
310
- "INVARIANT",
311
- "ISO_10367-box",
312
- "ISO-10646-J-1",
313
- "ISO-10646-UCS-2",
314
- "ISO-10646-UCS-4",
315
- "ISO-10646-UCS-Basic",
316
- "ISO-10646-Unicode-Latin1",
317
- "ISO-10646-UTF-1",
318
- "ISO-11548-1",
319
- "ISO-2022-CN",
320
- "ISO-2022-CN-EXT",
321
- "ISO-2022-JP",
322
- "ISO-2022-JP-2",
323
- "ISO-2022-KR",
324
- "ISO_2033-1983",
325
- "ISO_5427",
326
- "ISO_5427:1981",
327
- "ISO_5428:1980",
328
- "ISO_646.basic:1983",
329
- "ISO_646.irv:1983",
330
- "ISO_6937-2-25",
331
- "ISO_6937-2-add",
332
- "ISO-8859-10",
333
- "ISO_8859-1:1987",
334
- "ISO-8859-13",
335
- "ISO-8859-14",
336
- "ISO-8859-15",
337
- "ISO-8859-16",
338
- "ISO-8859-1-Windows-3.0-Latin-1",
339
- "ISO-8859-1-Windows-3.1-Latin-1",
340
- "ISO_8859-2:1987",
341
- "ISO-8859-2-Windows-Latin-2",
342
- "ISO_8859-3:1988",
343
- "ISO_8859-4:1988",
344
- "ISO_8859-5:1988",
345
- "ISO_8859-6:1987",
346
- "ISO_8859-6-E",
347
- "ISO_8859-6-I",
348
- "ISO_8859-7:1987",
349
- "ISO_8859-8:1988",
350
- "ISO_8859-8-E",
351
- "ISO_8859-8-I",
352
- "ISO_8859-9:1989",
353
- "ISO-8859-9-Windows-Latin-5",
354
- "ISO_8859-supp",
355
- "iso-ir-90",
356
- "ISO-Unicode-IBM-1261",
357
- "ISO-Unicode-IBM-1264",
358
- "ISO-Unicode-IBM-1265",
359
- "ISO-Unicode-IBM-1268",
360
- "ISO-Unicode-IBM-1276",
361
- "IT",
362
- "JIS_C6220-1969-jp",
363
- "JIS_C6220-1969-ro",
364
- "JIS_C6226-1978",
365
- "JIS_C6226-1983",
366
- "JIS_C6229-1984-a",
367
- "JIS_C6229-1984-b",
368
- "JIS_C6229-1984-b-add",
369
- "JIS_C6229-1984-hand",
370
- "JIS_C6229-1984-hand-add",
371
- "JIS_C6229-1984-kana",
372
- "JIS_Encoding",
373
- "JIS_X0201",
374
- "JIS_X0212-1990",
375
- "JUS_I.B1.002",
376
- "JUS_I.B1.003-mac",
377
- "JUS_I.B1.003-serb",
378
- "KOI7-switched",
379
- "KOI8-R",
380
- "KOI8-U",
381
- "KS_C_5601-1987",
382
- "KSC5636",
383
- "KZ-1048",
384
- "latin-greek",
385
- "Latin-greek-1",
386
- "latin-lap",
387
- "macintosh",
388
- "Microsoft-Publishing",
389
- "MNEM",
390
- "MNEMONIC",
391
- "MSZ_7795.3",
392
- "Name",
393
- "NATS-DANO",
394
- "NATS-DANO-ADD",
395
- "NATS-SEFI",
396
- "NATS-SEFI-ADD",
397
- "NC_NC00-10:81",
398
- "NF_Z_62-010",
399
- "NF_Z_62-010_(1973)",
400
- "NS_4551-1",
401
- "NS_4551-2",
402
- "OSD_EBCDIC_DF03_IRV",
403
- "OSD_EBCDIC_DF04_1",
404
- "OSD_EBCDIC_DF04_15",
405
- "PC8-Danish-Norwegian",
406
- "PC8-Turkish",
407
- "PT",
408
- "PT2",
409
- "PTCP154",
410
- "SCSU",
411
- "SEN_850200_B",
412
- "SEN_850200_C",
413
- "Shift_JIS",
414
- "T.101-G2",
415
- "T.61-7bit",
416
- "T.61-8bit",
417
- "TIS-620",
418
- "TSCII",
419
- "UNICODE-1-1",
420
- "UNICODE-1-1-UTF-7",
421
- "UNKNOWN-8BIT",
422
- "US-ASCII",
423
- "us-dk",
424
- "UTF-16",
425
- "UTF-16BE",
426
- "UTF-16LE",
427
- "UTF-32",
428
- "UTF-32BE",
429
- "UTF-32LE",
430
- "UTF-7",
431
- "UTF-8",
432
- "Ventura-International",
433
- "Ventura-Math",
434
- "Ventura-US",
435
- "videotex-suppl",
436
- "VIQR",
437
- "VISCII",
438
- "windows-1250",
439
- "windows-1251",
440
- "windows-1252",
441
- "windows-1253",
442
- "windows-1254",
443
- "windows-1255",
444
- "windows-1256",
445
- "windows-1257",
446
- "windows-1258",
447
- "Windows-31J",
448
- "windows-874"
449
- ]
450
- }
451
- },
452
- "version": 1,
453
- "description": "File object describing a file with meta-information",
454
- "meta-category": "file",
455
- "uuid": "688c46fb-5edb-40a3-8273-1af7923e0000",
456
- "name": "overwrite_file"
457
- }
@@ -1,35 +0,0 @@
1
- {
2
- "Attribute": [
3
- {
4
- "ShadowAttribute": [
5
- {
6
- "category": "Payload delivery",
7
- "disable_correlation": false,
8
- "to_ids": true,
9
- "type": "filename",
10
- "value": "bar.pdf"
11
- }
12
- ],
13
- "category": "Payload delivery",
14
- "disable_correlation": false,
15
- "to_ids": true,
16
- "type": "filename",
17
- "value": "bar.exe"
18
- }
19
- ],
20
- "ShadowAttribute": [
21
- {
22
- "category": "Payload delivery",
23
- "disable_correlation": false,
24
- "to_ids": true,
25
- "type": "filename",
26
- "value": "baz.jpg"
27
- }
28
- ],
29
- "analysis": "1",
30
- "date": "2017-12-31",
31
- "distribution": "1",
32
- "info": "This is a test",
33
- "threat_level_id": "1"
34
- }
35
-
@@ -1,148 +0,0 @@
1
- {
2
- "Attribute": [
3
- {
4
- "ShadowAttribute": [
5
- {
6
- "Org": {
7
- "id": "1",
8
- "name": "CIRCL",
9
- "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
10
- },
11
- "category": "Artifacts dropped",
12
- "comment": "",
13
- "disable_correlation": false,
14
- "event_id": "6676",
15
- "event_uuid": "5a4cb19a-f550-437f-bd29-48ed950d210f",
16
- "id": "3770",
17
- "old_id": "811578",
18
- "org_id": "1",
19
- "proposal_to_delete": false,
20
- "timestamp": "1514975846",
21
- "to_ids": true,
22
- "type": "filename",
23
- "uuid": "5a4cb1c7-fa84-45fa-8d27-4822950d210f",
24
- "value": "blah.exe.jpg"
25
- }
26
- ],
27
- "category": "Artifacts dropped",
28
- "comment": "",
29
- "deleted": false,
30
- "disable_correlation": false,
31
- "distribution": "5",
32
- "event_id": "6676",
33
- "id": "811578",
34
- "object_id": "0",
35
- "sharing_group_id": "0",
36
- "timestamp": "1514975687",
37
- "to_ids": false,
38
- "type": "filename",
39
- "uuid": "5a4cb1c7-fa84-45fa-8d27-4822950d210f",
40
- "value": "blah.exe"
41
- }
42
- ],
43
- "Object": [
44
- {
45
- "Attribute": [
46
- {
47
- "ShadowAttribute": [
48
- {
49
- "Org": {
50
- "id": "1",
51
- "name": "CIRCL",
52
- "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
53
- },
54
- "category": "Payload delivery",
55
- "comment": "",
56
- "disable_correlation": false,
57
- "event_id": "6676",
58
- "event_uuid": "5a4cb19a-f550-437f-bd29-48ed950d210f",
59
- "id": "3771",
60
- "old_id": "811579",
61
- "org_id": "1",
62
- "proposal_to_delete": false,
63
- "timestamp": "1514976196",
64
- "to_ids": true,
65
- "type": "filename",
66
- "uuid": "5a4cb2b8-4748-4c72-96e6-4588950d210f",
67
- "value": "baz.png.exe"
68
- }
69
- ],
70
- "category": "Payload delivery",
71
- "comment": "",
72
- "deleted": false,
73
- "disable_correlation": false,
74
- "distribution": "5",
75
- "event_id": "6676",
76
- "id": "811579",
77
- "object_id": "2278",
78
- "object_relation": "filename",
79
- "sharing_group_id": "0",
80
- "timestamp": "1514975928",
81
- "to_ids": true,
82
- "type": "filename",
83
- "uuid": "5a4cb2b8-4748-4c72-96e6-4588950d210f",
84
- "value": "baz.png"
85
- },
86
- {
87
- "category": "Other",
88
- "comment": "",
89
- "deleted": false,
90
- "disable_correlation": true,
91
- "distribution": "5",
92
- "event_id": "6676",
93
- "id": "811580",
94
- "object_id": "2278",
95
- "object_relation": "state",
96
- "sharing_group_id": "0",
97
- "timestamp": "1514975928",
98
- "to_ids": false,
99
- "type": "text",
100
- "uuid": "5a4cb2b9-92b4-4d3a-82df-4e86950d210f",
101
- "value": "Malicious"
102
- }
103
- ],
104
- "comment": "",
105
- "deleted": false,
106
- "description": "File object describing a file with meta-information",
107
- "distribution": "5",
108
- "event_id": "6676",
109
- "id": "2278",
110
- "meta-category": "file",
111
- "name": "file",
112
- "sharing_group_id": "0",
113
- "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",
114
- "template_version": "8",
115
- "timestamp": "1514975928",
116
- "uuid": "5a4cb2b8-7958-4323-852c-4d2a950d210f"
117
- }
118
- ],
119
- "Org": {
120
- "id": "1",
121
- "name": "CIRCL",
122
- "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
123
- },
124
- "Orgc": {
125
- "id": "1",
126
- "name": "CIRCL",
127
- "uuid": "55f6ea5e-2c60-40e5-964f-47a8950d210f"
128
- },
129
- "analysis": "2",
130
- "attribute_count": "3",
131
- "date": "2018-01-03",
132
- "disable_correlation": false,
133
- "distribution": "0",
134
- "event_creator_email": "raphael.vinot@circl.lu",
135
- "id": "6676",
136
- "info": "Test proposals / ShadowAttributes",
137
- "locked": false,
138
- "org_id": "1",
139
- "orgc_id": "1",
140
- "proposal_email_lock": true,
141
- "publish_timestamp": "0",
142
- "published": false,
143
- "sharing_group_id": "0",
144
- "threat_level_id": "1",
145
- "timestamp": "1514975929",
146
- "uuid": "5a4cb19a-f550-437f-bd29-48ed950d210f"
147
- }
148
-
@@ -1,5 +0,0 @@
1
- {
2
- "timestamp": "11111111",
3
- "type": "bar",
4
- "value": "1"
5
- }
@@ -1,2 +0,0 @@
1
- {
2
- }
@@ -1,29 +0,0 @@
1
- {
2
- "requiredOneOf": [
3
- "member1",
4
- "member2"
5
- ],
6
- "required": [
7
- "member3"
8
- ],
9
- "attributes": {
10
- "member1": {
11
- "description": "FirstMember",
12
- "misp-attribute": "text"
13
- },
14
- "member2": {
15
- "description": "SecondMember",
16
- "misp-attribute": "text",
17
- "multiple": true
18
- },
19
- "member3": {
20
- "description": "Thirdmember",
21
- "misp-attribute": "text"
22
- }
23
- },
24
- "version": "1",
25
- "description": "TestTemplate.",
26
- "meta-category": "file",
27
- "uuid": "4ec55cc6-9e49-4c64-b794-03c25c1a6589",
28
- "name": "test_object_template"
29
- }