-
Notifications
You must be signed in to change notification settings - Fork 127
/
Copy pathdefinition.json
75 lines (75 loc) · 2.05 KB
/
definition.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
{
"attributes": {
"first-seen": {
"description": "When the paste has been accessible or seen for the first time.",
"disable_correlation": true,
"misp-attribute": "datetime",
"ui-priority": 0
},
"last-seen": {
"description": "When the paste has been accessible or seen for the last time.",
"disable_correlation": true,
"misp-attribute": "datetime",
"ui-priority": 0
},
"link": {
"description": "Link to the original source of the source or post (when used legitimately for OSINT source or alike).",
"misp-attribute": "link",
"ui-priority": 0
},
"origin": {
"description": "Original source of the paste or post.",
"disable_correlation": true,
"misp-attribute": "text",
"ui-priority": 0,
"values_list": [
"pastebin.com",
"pastebin.com_pro",
"pastebin.fr",
"pastie.org",
"slexy.org",
"gist.github.com",
"codepad.org",
"safebin.net",
"hastebin.com",
"ghostbin.com",
"paste.ee",
"0bin.net"
]
},
"paste": {
"description": "Raw text of the paste or post",
"misp-attribute": "text",
"ui-priority": 1
},
"paste-file": {
"description": "Content of the paste in file",
"misp-attribute": "attachment",
"ui-priority": 0
},
"title": {
"description": "Title of the paste or post.",
"misp-attribute": "text",
"ui-priority": 0
},
"url": {
"description": "Link to the original source of the paste or post (when used maliciously).",
"misp-attribute": "url",
"ui-priority": 0
},
"username": {
"description": "User who posted the post.",
"misp-attribute": "text",
"ui-priority": 0
}
},
"description": "Paste or similar post from a website allowing to share privately or publicly posts.",
"meta-category": "misc",
"name": "paste",
"requiredOneOf": [
"origin",
"paste"
],
"uuid": "cedc055c-78aa-49a4-bfd7-4cc30cecef12",
"version": 6
}