Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve OpenTIDE Object #446

Open
wants to merge 5 commits into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -312,6 +312,7 @@ for a specific attribute. An optional **to_ids** boolean field to disable the ID
- [objects/news-agency](https://github.com/MISP/misp-objects/blob/main/objects/news-agency/definition.json) - News agencies compile news and disseminate news in bulk.
- [objects/news-media](https://github.com/MISP/misp-objects/blob/main/objects/news-media/definition.json) - News media are forms of mass media delivering news to the general public.
- [objects/open-data-security](https://github.com/MISP/misp-objects/blob/main/objects/open-data-security/definition.json) - An object describing an open dataset available and described under the open data security model. ref. https://github.com/CIRCL/open-data-security.
- [objects/opentide](https://github.com/MISP/misp-objects/blob/main/objects/opentide/definition.json) - Describes an Open Threat Informed Detection Engineering object. See https://code.europa.eu/ec-digit-s2/opentide
- [objects/organization](https://github.com/MISP/misp-objects/blob/main/objects/organization/definition.json) - An object which describes an organization.
- [objects/original-imported-file](https://github.com/MISP/misp-objects/blob/main/objects/original-imported-file/definition.json) - Object describing the original file used to import data in MISP.
- [objects/paloalto-threat-event](https://github.com/MISP/misp-objects/blob/main/objects/paloalto-threat-event/definition.json) - Palo Alto Threat Log Event.
Expand Down
23 changes: 17 additions & 6 deletions objects/opentide/definition.json
Original file line number Diff line number Diff line change
Expand Up @@ -3,19 +3,19 @@
"name": {
"description": "Name of the OpenTIDE Object",
"misp-attribute": "text",
"ui-priority": 0
"ui-priority": 4
},
"opentide-object": {
"description": "YAML Content of the Opentide Object",
"misp-attribute": "text",
"ui-priority": 3
"ui-priority": 0
},
"opentide-type": {
"description": "Type of the OpenTIDE Object",
"disable_correlation": true,
"misp-attribute": "text",
"multiple": false,
"ui-priority": 2,
"ui-priority": 1,
"values_list": [
"tvm",
"cdm",
Expand All @@ -25,17 +25,28 @@
"uuid": {
"description": "UUID of the OpenTIDE Object",
"misp-attribute": "text",
"ui-priority": 1
"ui-priority": 3
},
"version": {
"description": "Version of the OpenTIDE Object",
"disable_correlation": true,
"misp-attribute": "text",
"sane_default": [
"1"
],
"ui-priority": 2
}
},
"description": "Object that is a container for threat or detection data, in accordance with the OpenTIDE Framework (https://code.europa.eu/ec-digit-s2/opentide)",
"meta-category": "misc",
"name": "opentide",
"required": [
"name",
"uuid",
"version",
"opentide-object",
"opentide-type"
],
"uuid": "892fd46a-f69e-455c-8c4f-843a4b8f4295",
"version": 1
}
"version": 2
}
Loading