Merge pull request #459 from threatgrid/XDR-18118-New-Device-Insights…

…-Observable-to-CTIM-Schema Add new observable types
threatgrid · Jan 31, 2025 · 8cc2218 · 8cc2218
2 parents d32e853 + bee7a6c
commit 8cc2218
Show file tree

Hide file tree

Showing 9 changed files with 102 additions and 0 deletions.
diff --git a/doc/structures/asset_mapping.md b/doc/structures/asset_mapping.md
@@ -381,6 +381,7 @@ The type of observable.
     * email_subject
     * file_name
     * file_path
+    * google_cloud_id
     * hostname
     * imei
     * imsi
@@ -410,7 +411,9 @@ The type of observable.
     * registry_name
     * registry_path
     * s1_agent_id
+    * secure_access_id
     * serial_number
+    * service_now_id
     * sha1
     * sha256
     * swc_device_id

diff --git a/doc/structures/bundle.md b/doc/structures/bundle.md
@@ -1924,6 +1924,7 @@ The type of observable.
     * email_subject
     * file_name
     * file_path
+    * google_cloud_id
     * hostname
     * imei
     * imsi
@@ -1953,7 +1954,9 @@ The type of observable.
     * registry_name
     * registry_path
     * s1_agent_id
+    * secure_access_id
     * serial_number
+    * service_now_id
     * sha1
     * sha256
     * swc_device_id
@@ -3951,6 +3954,7 @@ Observable types that can be acted upon.
     * email_subject
     * file_name
     * file_path
+    * google_cloud_id
     * hostname
     * imei
     * imsi
@@ -3980,7 +3984,9 @@ Observable types that can be acted upon.
     * registry_name
     * registry_path
     * s1_agent_id
+    * secure_access_id
     * serial_number
+    * service_now_id
     * sha1
     * sha256
     * swc_device_id
@@ -6172,6 +6178,7 @@ The type of observable.
     * email_subject
     * file_name
     * file_path
+    * google_cloud_id
     * hostname
     * imei
     * imsi
@@ -6201,7 +6208,9 @@ The type of observable.
     * registry_name
     * registry_path
     * s1_agent_id
+    * secure_access_id
     * serial_number
+    * service_now_id
     * sha1
     * sha256
     * swc_device_id
@@ -9841,6 +9850,7 @@ The type of observable.
     * email_subject
     * file_name
     * file_path
+    * google_cloud_id
     * hostname
     * imei
     * imsi
@@ -9870,7 +9880,9 @@ The type of observable.
     * registry_name
     * registry_path
     * s1_agent_id
+    * secure_access_id
     * serial_number
+    * service_now_id
     * sha1
     * sha256
     * swc_device_id
@@ -9929,6 +9941,7 @@ The type of observable.
     * email_subject
     * file_name
     * file_path
+    * google_cloud_id
     * hostname
     * imei
     * imsi
@@ -9958,7 +9971,9 @@ The type of observable.
     * registry_name
     * registry_path
     * s1_agent_id
+    * secure_access_id
     * serial_number
+    * service_now_id
     * sha1
     * sha256
     * swc_device_id
@@ -10032,6 +10047,7 @@ The type of observable.
     * email_subject
     * file_name
     * file_path
+    * google_cloud_id
     * hostname
     * imei
     * imsi
@@ -10061,7 +10077,9 @@ The type of observable.
     * registry_name
     * registry_path
     * s1_agent_id
+    * secure_access_id
     * serial_number
+    * service_now_id
     * sha1
     * sha256
     * swc_device_id
@@ -10247,6 +10265,7 @@ The type of observable.
     * email_subject
     * file_name
     * file_path
+    * google_cloud_id
     * hostname
     * imei
     * imsi
@@ -10276,7 +10295,9 @@ The type of observable.
     * registry_name
     * registry_path
     * s1_agent_id
+    * secure_access_id
     * serial_number
+    * service_now_id
     * sha1
     * sha256
     * swc_device_id
@@ -10419,6 +10440,7 @@ The type of observable.
     * email_subject
     * file_name
     * file_path
+    * google_cloud_id
     * hostname
     * imei
     * imsi
@@ -10448,7 +10470,9 @@ The type of observable.
     * registry_name
     * registry_path
     * s1_agent_id
+    * secure_access_id
     * serial_number
+    * service_now_id
     * sha1
     * sha256
     * swc_device_id
@@ -11016,6 +11040,7 @@ The type of observable.
     * email_subject
     * file_name
     * file_path
+    * google_cloud_id
     * hostname
     * imei
     * imsi
@@ -11045,7 +11070,9 @@ The type of observable.
     * registry_name
     * registry_path
     * s1_agent_id
+    * secure_access_id
     * serial_number
+    * service_now_id
     * sha1
     * sha256
     * swc_device_id
@@ -11519,6 +11546,7 @@ The type of observable.
     * email_subject
     * file_name
     * file_path
+    * google_cloud_id
     * hostname
     * imei
     * imsi
@@ -11548,7 +11576,9 @@ The type of observable.
     * registry_name
     * registry_path
     * s1_agent_id
+    * secure_access_id
     * serial_number
+    * service_now_id
     * sha1
     * sha256
     * swc_device_id
@@ -12129,6 +12159,7 @@ The type of observable.
     * email_subject
     * file_name
     * file_path
+    * google_cloud_id
     * hostname
     * imei
     * imsi
@@ -12158,7 +12189,9 @@ The type of observable.
     * registry_name
     * registry_path
     * s1_agent_id
+    * secure_access_id
     * serial_number
+    * service_now_id
     * sha1
     * sha256
     * swc_device_id