misp-objects/objects/domain-ip/definition.json at 2c2c11c9ca0e2f568c054e720eb50e6b5d566a15 · MISP/misp-objects · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
{
  "name": "domain|ip",
  "uuid": "43b3b146-77eb-4931-b4cc-b66c60f28734",
  "meta-category": "network",
  "description": "A domain and IP address seen as a tuple in a specific time frame.",
  "version": 1,
  "attributes": {
    "ip": {
      "misp-attribute": "ip-dst",
      "misp-usage-frequency": 1,
      "categories": [
        "Network activity",
        "External analysis"
      ]
    },
    "domain": {
      "misp-attribute": "domain",
      "misp-usage-frequency": 1,
      "categories": [
        "Network activity",
        "External analysis"
      ]
    },
    "first-seen": {
      "misp-attribute": "datetime",
      "misp-usage-frequency": 0
    },
    "last-seen": {
      "misp-attribute": "datetime",
      "misp-usage-frequency": 0
    },
    "text": {
      "misp-attribute": "text",
      "misp-usage-frequency": 1
    }
  },
  "required": [
    "ip",
    "domain"
  ]
}