OTX -> MISP
Below are all the mappings from OTX to MISP.
AlienVault OTX |
MISP |
|---|---|
author_name + name |
info |
created |
date |
description |
comment |
tlp |
tag |
tags |
tag |
adversary |
threat-actor |
malware |
malware-type |
country |
target-location |
FileHash-SHA256 (indicator) |
sha256 |
FileHash-SHA256 (indicator) |
sha256 |
FileHash-SHA1 (indicator) |
sha1 |
FileHash-MD5 (indicator) |
md5 |
URL (indicator) |
url |
domain (indicator) |
domain |
hostname (indicator) |
hostname |
IPv4/IPv6 (indicator) |
ip-dst |
email (indicator) |
|
Mutex (indicator) |
mutex |
CVE (indicator) |
vulnerability |
FileHash-IMPHASH (indicator) |
impash |
FileHash-PEHASH (indicator) |
pehash |
FilePath (indicator) |
filename |
YARA (indicator) |
yara |