definition.json

{
  "attributes": {
    "address": {
      "description": "Onion address of the Tor node seen.",
      "misp-attribute": "onion-address",
      "ui-priority": 1
    },
    "description": {
      "description": "Tor onion service comment.",
      "disable_correlation": true,
      "misp-attribute": "text",
      "ui-priority": 1
    },
    "first-seen": {
      "description": "When the Tor hidden service was been seen for the first time.",
      "disable_correlation": true,
      "misp-attribute": "datetime",
      "ui-priority": 0
    },
    "language": {
      "description": "Language(s) detected on the onion address.",
      "disable_correlation": true,
      "misp-attribute": "text",
      "multiple": true,
      "ui-priority": 0
    },
    "last-seen": {
      "description": "When the Tor hidden service was seen for the last time.",
      "disable_correlation": true,
      "misp-attribute": "datetime",
      "ui-priority": 0
    },
    "title": {
      "description": "Known title(s) of the Tor onion address.",
      "disable_correlation": true,
      "misp-attribute": "text",
      "multiple": true,
      "ui-priority": 0
    }
  },
  "description": "Tor hidden service (onion service) object.",
  "meta-category": "misc",
  "name": "tor-hiddenservice",
  "required": [
    "address"
  ],
  "requiredOneOf": [
    "address",
    "first-seen",
    "last-seen",
    "description"
  ],
  "uuid": "cbac07d6-fbe9-43b8-8d91-d515812ce330",
  "version": 2
}