Skip to content

Instantly share code, notes, and snippets.

@kf0jvt
Last active December 31, 2015 05:19
Show Gist options
  • Save kf0jvt/7939564 to your computer and use it in GitHub Desktop.
Save kf0jvt/7939564 to your computer and use it in GitHub Desktop.
{
"actor_id": "41D3AF17-147D-4DCC-ABE6-684174325D66",
"country": [
{
"country": "CN",
"source": [
1,
2
]
},
{
"country": "IN",
"source": [
3
]
}
],
"motive": [
{
"motive": "Espionage",
"source": [
3
]
},
{
"motive": "Fun"
}
],
"schema_version": 0.9,
"source": {
"csint": [
{
"TLP": "Amber",
"date_published": "20131212",
"id": 3,
"organization": "DSS",
"title": "Secret Document from DSS"
}
],
"osint": [
{
"author": [
{
"fname": "Brian",
"lname": "Krebs"
}
],
"date_accessed": "20131212",
"date_published": "20130220",
"id": 1,
"organization": "KrebsonSecurity",
"title": "Bit9 Breach Began in July 2012",
"url": "http://krebsonsecurity.com/tag/bit9-hack/"
},
{
"author": [
{
"handle": "bfist"
},
{
"handle": "sno0ose"
}
],
"date_published": "20131212",
"id": 2,
"organization": "KevNet",
"title": "Everything you heard is Bullshit",
"url": "http://some.fake.address"
}
]
},
"variety": [
{
"source": [
1,
2
],
"variety": "State-affiliated"
}
]
}
{
"properties": {
"actor_id": {
"required": true,
"type": "string"
},
"aliases": {
"items": {
"properties": {
"name": {
"required": true,
"type": "string"
},
"organization": {
"required": false,
"type": "string"
},
"sources": {
"items": {
"required": true,
"type": "integer"
},
"required": false,
"type": "array"
}
},
"required": false
},
"required": false,
"type": "array"
},
"countries": {
"items": {
"properties": {
"country": {
"required": true,
"type": "string"
},
"sources": {
"items": {
"required": true,
"type": "integer"
},
"required": false,
"type": "array"
}
},
"required": false,
"type": "object"
},
"required": false,
"type": "array"
},
"motives": {
"items": {
"properties": {
"motive": {
"required": true,
"type": "string"
},
"sources": {
"items": {
"required": true,
"type": "integer"
},
"required": false,
"type": "array"
}
},
"required": false,
"type": "object"
},
"required": false,
"type": "array"
},
"schema_version": {
"required": true,
"type": "number"
},
"sources": {
"items": {
"properties": {
"authors": {
"items": {
"properties": {
"first_name": {
"required": false
},
"handle": {
"description": "could be a twitter id, or a pseudonym",
"required": false
},
"last_name": {
"required": false,
"type": "string"
}
},
"required": true
},
"required": false,
"type": "array"
},
"date_accessed": {
"required": false,
"type": "string"
},
"date_published": {
"required": false,
"type": "string"
},
"intel_discipline": {
"description": "OSINT, CSINT, HUMINT, etc",
"required": false,
"type": "string"
},
"number": {
"description": "used to identify this source in other fields",
"required": true,
"type": "integer"
},
"organization": {
"required": false,
"type": "string"
},
"title": {
"required": true,
"type": "string"
},
"tlp": {
"description": "WHITE, GREEN, AMBER, RED",
"required": false,
"type": "string"
},
"url": {
"required": false,
"type": "string"
}
},
"required": true
},
"required": false,
"type": "array"
},
"varieties": {
"items": {
"properties": {
"sources": {
"items": {
"required": true,
"type": "integer"
},
"required": false,
"type": "array"
},
"variety": {
"required": true,
"type": "string"
}
},
"required": false
},
"required": false,
"type": "array"
}
},
"required": false,
"type": "object"
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment