Skip to content

Commit e33e893

Browse files
committed
new: [scan-result] object for scanning result
This is the metadata of a scanning result including the raw output of the scan result. This objects can be used for tools like Nessus or even source code scanner to share the details about a scan. For additional information such IP address or alike, other objects will be used with the proper relationship added.
1 parent f61702d commit e33e893

File tree

1 file changed

+91
-0
lines changed

1 file changed

+91
-0
lines changed
Lines changed: 91 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,91 @@
1+
{
2+
"attributes": {
3+
"description": {
4+
"description": "Description of the scanning performed in this scan-result",
5+
"disable_correlation": true,
6+
"misp-attribute": "text",
7+
"ui-priority": 1
8+
},
9+
"scan-end": {
10+
"description": "End of scanning activity",
11+
"disable_correlation": true,
12+
"misp-attribute": "datetime",
13+
"multiple": true,
14+
"ui-priority": 0
15+
},
16+
"scan-result": {
17+
"description": "The scan-result as a file (in machine-readable or human-readable format). The file is always consider non-malicious.",
18+
"misp-attribute": "attachment",
19+
"ui-priority": 1
20+
},
21+
"scan-result-format": {
22+
"description": "Format used for the scan-result.",
23+
"misp-attribute": "text",
24+
"ui-priority": 1,
25+
"values_list": [
26+
"free-text output",
27+
"XML",
28+
"JSON",
29+
"CSV",
30+
"HTML",
31+
"PDF",
32+
"Unknown"
33+
]
34+
},
35+
"scan-result-tool": {
36+
"description": "Tool used which generated the scan-result.",
37+
"disable_correlation": true,
38+
"misp-attribute": "text",
39+
"sane_default": [
40+
"Nessus",
41+
"OpenVAS",
42+
"Nmap",
43+
"Nikto",
44+
"masscan",
45+
"zmap",
46+
"Qualys",
47+
"dnscan",
48+
"dnsrecon",
49+
"striker",
50+
"rhawk",
51+
"sslyze",
52+
"wafw00f",
53+
"sqlmap",
54+
"wig",
55+
"knock",
56+
"wpscan",
57+
"joomscan",
58+
"arachni",
59+
"nuclei"
60+
],
61+
"ui-priority": 0
62+
},
63+
"scan-start": {
64+
"description": "Start of scanning activity",
65+
"disable_correlation": true,
66+
"misp-attribute": "datetime",
67+
"multiple": true,
68+
"ui-priority": 1
69+
},
70+
"scan-type": {
71+
"description": "Type of scanning in the scan-result.",
72+
"disable_correlation": true,
73+
"misp-attribute": "text",
74+
"multiple": true,
75+
"ui-priority": 0,
76+
"values_list": [
77+
"Network",
78+
"System",
79+
"Unknown"
80+
]
81+
}
82+
},
83+
"description": "Scan result object to add meta-data and the output of the scan result by itself.",
84+
"meta-category": "network",
85+
"name": "scan-result",
86+
"required": [
87+
"scan-result"
88+
],
89+
"uuid": "ebe2a359-8f5b-4a45-8106-d1678935b4c4",
90+
"version": 1
91+
}

0 commit comments

Comments
 (0)