Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
60 changes: 60 additions & 0 deletions objects/permission-analysis/definition.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,60 @@
{
"attributes": {
"analyzed-privileges-count": {
"description": "Number of privileges evaluated by this analysis.",
"disable_correlation": true,
"misp-attribute": "counter",
"to_ids": false,
"ui-priority": 1
},
"condition": {
"description": "One complete policy condition serialized as a JSON name/value or name/values object per attribute, retaining grouping and types.",
"disable_correlation": true,
"misp-attribute": "text",
"multiple": true,
"to_ids": false,
"ui-priority": 1
},
"potential-attacks-count": {
"description": "Number of privilege-to-attack mappings reported by the analyzer; this is not a count of observed attacks.",
"disable_correlation": true,
"misp-attribute": "counter",
"to_ids": false,
"ui-priority": 1
},
"privilege": {
"description": "One granted action or privilege per attribute.",
"disable_correlation": true,
"misp-attribute": "text",
"multiple": true,
"to_ids": false,
"ui-priority": 1
},
"unused-privileges-count": {
"description": "Number of evaluated privileges unused within the source analysis timeframe.",
"disable_correlation": true,
"misp-attribute": "counter",
"to_ids": false,
"ui-priority": 1
},
"unused-services-count": {
"description": "Number of services or resource types not used within the source analysis timeframe.",
"disable_correlation": true,
"misp-attribute": "counter",
"to_ids": false,
"ui-priority": 1
}
},
"description": "One identity-centric permission analysis result with granted actions and counts of unused permissions, unused services and potential attack mappings. Based on OCSF 1.9.0: https://schema.ocsf.io/1.9.0/objects/permission_analysis_result.",
"meta-category": "misc",
"name": "permission-analysis",
"requiredOneOf": [
"privilege",
"analyzed-privileges-count",
"unused-privileges-count",
"unused-services-count",
"potential-attacks-count"
],
"uuid": "849d7f31-05cd-43db-b100-4ffe52f8c691",
"version": 2
}
Loading