Skip to content

Commit 1b42b02

Browse files
authored
Update definition.json
Adding the multiple possibility for SMSC GT to cover SMS Spaming case. Also text field for multiple details if needed. Adding "MapSmsText" attribute to help matching malicious URL, keywords or MSISDN inside SMS.
1 parent 2edd725 commit 1b42b02

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

objects/ss7-attack/definition.json

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -111,13 +111,19 @@
111111
"MapSmscGT": {
112112
"description": "MAP SMSC. Phone number.",
113113
"ui-priority": 0,
114+
"multiple": true,
114115
"misp-attribute": "text"
115116
},
116117
"MapSmsTP-OA": {
117118
"description": "MAP SMS TP-OA. Phone number.",
118119
"ui-priority": 0,
119120
"misp-attribute": "text"
120121
},
122+
"MapSmsText": {
123+
"description": "MAP SMS Text. Important indicators in SMS text.",
124+
"ui-priority": 0,
125+
"misp-attribute": "text"
126+
},
121127
"MapSmsTP-PID": {
122128
"description": "MAP SMS TP-PID.",
123129
"ui-priority": 0,
@@ -151,6 +157,7 @@
151157
"description": "A description of the attack seen via SS7 logging.",
152158
"disable_correlation": true,
153159
"ui-priority": 0,
160+
"multiple": true,
154161
"misp-attribute": "text"
155162
},
156163
"first-seen": {

0 commit comments

Comments
 (0)