indicator.json

{
  "composite_indicator_expression" : {
    "indicator_ids" : [ "string" ],
    "operator" : "and"
  },
  "confidence" : "High",
  "description" : "string",
  "external_ids" : [ "string" ],
  "external_references" : [ {
    "description" : "string",
    "external_id" : "string",
    "hashes" : [ "string" ],
    "source_name" : "string",
    "url" : "string"
  } ],
  "id" : "string",
  "indicator_type" : [ "Anonymization" ],
  "kill_chain_phases" : [ {
    "kill_chain_name" : "string",
    "phase_name" : "string"
  } ],
  "language" : "string",
  "likely_impact" : "string",
  "negate" : true,
  "producer" : "string",
  "revision" : 10,
  "schema_version" : "1.3.21",
  "severity" : "Critical",
  "short_description" : "string",
  "source" : "string",
  "source_uri" : "string",
  "specification" : {
    "judgements" : [ "string" ],
    "required_judgements" : [ {
      "confidence" : "High",
      "judgement_id" : "string",
      "relationship" : "string",
      "source" : "string"
    } ],
    "type" : "Judgement"
  },
  "tags" : [ "string" ],
  "test_mechanisms" : [ "string" ],
  "timestamp" : "2016-01-01T01:01:01.000Z",
  "title" : "string",
  "tlp" : "green",
  "type" : "indicator",
  "valid_time" : {
    "end_time" : "2016-01-01T01:01:01.000Z",
    "start_time" : "2016-01-01T01:01:01.000Z"
  }
}