-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathfake_domain_1.json
90 lines (90 loc) · 2.18 KB
/
fake_domain_1.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
{
"domain_name": "example.com",
"aggregate_probability": 0.7,
"aggregate_description": "This is a test description of evilness",
"ip_addresses": [
{
"ip": "82.13.1.174",
"geo": {
"country": "United States",
"city": "New York",
"latitude": 40.7128,
"longitude": -74.006
},
"asn": {
"asn": "AS12345",
"as_org": "Some Organization",
"network_address": "82.13.1.0",
"prefix_len": 24
},
"collection_results": [
{
"source": "Geo",
"collection_date": "2024-01-01T00:00:00Z",
"error": null
},
{
"source": "ICMP",
"collection_date": "2024-01-01T00:00:00Z",
"error": null
}
],
"qradar_offense_source": {
"domain_id": 123,
"magnitude": 5,
"offenses": [
{
"id": 1,
"description": "This is a test description of evilness",
"event_count": 10,
"flow_count": 20
},
{
"id": 2,
"description": "This is a test description of evilness",
"event_count": 5,
"flow_count": 10
}
]
}
}
],
"classification_results": [
{
"classification_date": "2024-01-01T00:00:00Z",
"classifier": "Phishing",
"probability": 0.9,
"description": "Super evil phishing detected."
},
{
"classification_date": "2024-01-01T00:00:00Z",
"classifier": "Malware",
"probability": 0.5,
"description": "Super evil malware detected."
},
{
"classification_date": "2024-01-01T00:00:00Z",
"classifier": "DGA",
"probability": 2.737947585789134e-6,
"description": "No DGA detected."
}
],
"first_seen": "2016-01-01T00:00:00Z",
"last_seen": "2024-01-01T00:00:00Z",
"collection_results": [
{
"source": "DNS",
"collection_date": "2024-01-01T00:00:00Z",
"error": null
},
{
"source": "WHOIS",
"collection_date": "2024-01-01T00:00:00Z",
"error": null
}
],
"additional_info": {
"some_key": "some_value",
"another_key": "another_value"
}
}