Skip to content

Instantly share code, notes, and snippets.

@sbarnum
Last active December 1, 2015 21:40
Show Gist options
  • Save sbarnum/81054bc4ee3e118f00a3 to your computer and use it in GitHub Desktop.
Save sbarnum/81054bc4ee3e118f00a3 to your computer and use it in GitHub Desktop.
Simple "pure" JSON serialization of JSON-LD example STIX IP Watchlist content
{
"@id": "example:STIXPackage-33fe3b22-0201-47cf-85d0-97c02164528d",
"@type": "stix:Package",
"stix:indicators": [
{
"@id": "example:Indicator-33fe3b22-0201-47cf-85d0-97c02164528d",
"@type": "ind:Indicator",
"ind:indicatorType": "stixVocabs:IndicatorTypeVocab-1.1:IP_Watchlist",
"ind:observable": {"@id": "example:Observable-1c798262-a4cd-434d-a958-884d6980c459"},
"stixc:description": {"@value": "Sample IP Address Indicator for this watchlist. This contains one indicator with a set of three IP addresses in the watchlist."},
"stixc:timestamp": "2014-05-08T09:00:00Z"
}
],
"cybox:observables": {
"cybox:observable": [
{
"@id": "example:Observable-1c798262-a4cd-434d-a958-884d6980c459",
"@type": "cybox:Observable",
"cybox:observedEntity": {
"@id": "example:Object-1980ce43-8e03-490b-863a-ea404d12242e",
"@type": "addressObj:IPv4Address",
"addressObj:addressCategory": "ipv4-addr",
"addressObj:addressValue": {
"@type": "cyboxc:pattern",
"@value": "Equals( '10.0.0.0 OR 10.0.0.1 OR 10.0.0.2' )"
}
}
}
]
},
"stix:packageIntent": "stixVocabs:PackageIntentVocab-1.0:Indicators_-_Watchlist",
"stixc:timestamp": "2014-05-08T09:00:00Z",
"stixc:title": "Example watchlist that contains IP information."
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment