definition.json

{
  "attributes": {
    "a-record": {
      "categories": [
        "Network activity",
        "External analysis"
      ],
      "description": "IP Address sassociated with A Records",
      "misp-attribute": "ip-dst",
      "multiple": true,
      "ui-priority": 1
    },
    "mx-record": {
      "categories": [
        "Network activity",
        "External analysis"
      ],
      "description": "Domain associated with MX Record",
      "misp-attribute": "domain",
      "multiple": true,
      "ui-priority": 1
    },
    "ns-record": {
      "categories": [
        "Network activity",
        "External analysis"
      ],
      "description": "Domain associated with NS Records",
      "misp-attribute": "domain",
      "multiple": true,
      "ui-priority": 1
    },
    "queried-domain": {
      "categories": [
        "Network activity",
        "External analysis"
      ],
      "description": "Domain name",
      "misp-attribute": "domain",
      "ui-priority": 1
    },
    "text": {
      "description": "A description of the records",
      "misp-attribute": "text",
      "recommended": false,
      "ui-priority": 1
    }
  },
  "description": "A set of dns records observed for a specific domain.",
  "meta-category": "network",
  "name": "dns-record",
  "required": [
    "queried-domain"
  ],
  "requiredOneOf": [
    "a-record",
    "mx-record",
    "ns-record"
  ],
  "uuid": "f023c8f0-81ab-41f3-9f5d-fa597a34a9b9",
  "version": 1
}