-
Notifications
You must be signed in to change notification settings - Fork 33
/
casebooks.cljc
47 lines (42 loc) · 1.75 KB
/
casebooks.cljc
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
(ns ctim.examples.casebooks
(:require [ctim.schemas.common :as c]
[ctim.examples.actors :refer [actor-maximal]]
[ctim.examples.bundles :refer [bundle-maximal]]))
(def observables [{:type "hostname" :value "Demo_Cta"}
{:type "amp_computer_guid" :value "68e94bf7-e239-4821-90d6-b7eaa0233443"}
{:type "ms_machine_id" :value "19de2b42b3ab0df8c15d117b7760ffa40da59d31"}
{:type "s1_agent_id" :value "897194377714833828"}
{:type "ip" :value "100.213.110.122"}
{:type "ip" :value "136.184.130.98"}
{:type "mac_address" :value "85:28:cb:6a:21:41"}])
(def casebook-maximal
{:id "http://ex.tld/ctia/casebook/casebook-599c96cb-9e88-4d19-a3ee-a94802a39660"
:type "casebook"
:schema_version c/ctim-schema-version
:revision 1
:external_ids ["http://ex.tld/ctia/casebook/casebook-599c96cb-9e88-4d19-a3ee-a94802a39660"
"http://ex.tld/ctia/casebook/casebook-456"]
:external_references
[{:source_name "source"
:external_id "T1067"
:url "https://ex.tld/wiki/T1067"
:hashes ["#section1"]
:description "Description text"}]
:timestamp #inst "2016-10-01T00:00:00.000-00:00"
:language "language"
:title "casebook"
:description "description"
:short_description "short description"
:tlp "green"
:source "source"
:source_uri "http://example.com/"
:observables observables
:texts [{:type "foo"
:text "bar"}]
:bundle bundle-maximal})
(def casebook-minimal
{:id "http://ex.tld/ctia/casebook/casebook-599c96cb-9e88-4d19-a3ee-a94802a39660"
:type "casebook"
:schema_version c/ctim-schema-version})
(def new-casebook-maximal casebook-maximal)
(def new-casebook-minimal {})