{"response": [{"Event":{"id":"3631","orgc_id":"1","org_id":"1","date":"2021-05-21","threat_level_id":"1","info":"Test event 1 just atrributes","published":false,"uuid":"8ca56ae9-3747-4172-93d2-808da1a4eaf3","attribute_count":"1","analysis":"0","timestamp":"1621588162","distribution":"1","proposal_email_lock":false,"locked":false,"publish_timestamp":"0","sharing_group_id":"0","disable_correlation":false,"extends_uuid":"","event_creator_email":"admin@admin.test","Org":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488","local":true},"Orgc":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488","local":true},"Attribute":[{"id":"266258","type":"md5","category":"Payload installation","to_ids":false,"uuid":"34c59b06-d35d-4808-919c-4b452f185c52","event_id":"3631","distribution":"5","timestamp":"1621588162","comment":"Contextual comment for the file md5 attribute","sharing_group_id":"0","deleted":false,"disable_correlation":false,"object_id":"0","object_relation":null,"first_seen":null,"last_seen":null,"value":"70461da8b94c6ca5d2fda3260c5a8c3b","Galaxy":[],"ShadowAttribute":[]}],"ShadowAttribute":[],"RelatedEvent":[{"Event":{"id":"3633","date":"2021-05-21","threat_level_id":"1","info":"Test event 3 objects and attributes","published":false,"uuid":"4edb20c7-8175-484d-bdcd-fce6872c1ef3","analysis":"0","timestamp":"1621592532","distribution":"1","org_id":"1","orgc_id":"1","Org":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488"},"Orgc":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488"}}}],"Galaxy":[],"Object":[],"EventReport":[]}}]} {"response": [{"Event":{"id":"3632","orgc_id":"1","org_id":"1","date":"2021-05-21","threat_level_id":"2","info":"Test event 2 just more atrributes","published":false,"uuid":"efbca287-edb5-4ad7-b8e4-fe9da514a763","attribute_count":"4","analysis":"0","timestamp":"1621588836","distribution":"1","proposal_email_lock":false,"locked":false,"publish_timestamp":"0","sharing_group_id":"0","disable_correlation":false,"extends_uuid":"","event_creator_email":"admin@admin.test","Org":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488","local":true},"Orgc":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488","local":true},"Attribute":[{"id":"266259","type":"md5","category":"Artifacts dropped","to_ids":true,"uuid":"73102a1c-7432-47b7-9644-6f9d46b6887c","event_id":"3632","distribution":"5","timestamp":"1621588675","comment":"Artefact dropped for test 2","sharing_group_id":"0","deleted":false,"disable_correlation":false,"object_id":"0","object_relation":null,"first_seen":null,"last_seen":null,"value":"60461da8b94c6ca5d2fda3260c5a8c3b","Galaxy":[],"ShadowAttribute":[]},{"id":"266260","type":"domain","category":"Network activity","to_ids":true,"uuid":"a52a1b47-a580-4f33-96ba-939cf9146c9b","event_id":"3632","distribution":"5","timestamp":"1621588744","comment":"Conext for domain type attribute event 2","sharing_group_id":"0","deleted":false,"disable_correlation":false,"object_id":"0","object_relation":null,"first_seen":null,"last_seen":null,"value":"baddom.madeup.local","Galaxy":[],"ShadowAttribute":[]},{"id":"266261","type":"ip-src","category":"Network activity","to_ids":false,"uuid":"3dbf224b-7c84-4c4b-9f95-80f28954bd10","event_id":"3632","distribution":"5","timestamp":"1621588800","comment":"Ip-src attribute context for event2","sharing_group_id":"0","deleted":false,"disable_correlation":false,"object_id":"0","object_relation":null,"first_seen":null,"last_seen":null,"value":"10.0.0.1","Galaxy":[],"ShadowAttribute":[]},{"id":"266262","type":"ip-dst","category":"Network activity","to_ids":true,"uuid":"db4bfd36-7374-4f8c-9031-60e56d4bba30","event_id":"3632","distribution":"5","timestamp":"1621588836","comment":"ip-dst context for event id 2","sharing_group_id":"0","deleted":false,"disable_correlation":false,"object_id":"0","object_relation":null,"first_seen":null,"last_seen":null,"value":"192.168.1.50","Galaxy":[],"ShadowAttribute":[]}],"ShadowAttribute":[],"RelatedEvent":[{"Event":{"id":"684","date":"2018-03-26","threat_level_id":"3","info":"OSINT - Forgot About Default Accounts? No Worries, GoScanSSH Didn’t","published":true,"uuid":"5acdb4d0-b534-4713-9612-4a1d950d210f","analysis":"2","timestamp":"1523865236","distribution":"3","org_id":"1","orgc_id":"2","Org":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488"},"Orgc":{"id":"2","name":"CIRCL","uuid":"55f6ea5e-2c60-40e5-964f-47a8950d210f"}}}],"Galaxy":[],"Object":[],"EventReport":[]}}]} {"response": [{"Event":{"id":"3634","orgc_id":"1","org_id":"1","date":"2021-05-21","threat_level_id":"3","info":"Test event 4 with object","published":false,"uuid":"d98a8418-9f90-4b50-a623-6921ca5b356d","attribute_count":"3","analysis":"0","timestamp":"1621591770","distribution":"1","proposal_email_lock":false,"locked":false,"publish_timestamp":"0","sharing_group_id":"0","disable_correlation":false,"extends_uuid":"","event_creator_email":"admin@admin.test","Org":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488","local":true},"Orgc":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488","local":true},"Attribute":[],"ShadowAttribute":[],"RelatedEvent":[],"Galaxy":[],"Object":[{"id":"18208","name":"file","meta-category":"file","description":"File object describing a file with meta-information","template_uuid":"688c46fb-5edb-40a3-8273-1af7923e2215","template_version":"22","event_id":"3634","uuid":"190c762c-a389-4ecc-8f6e-68f92d42adef","timestamp":"1621591770","distribution":"5","sharing_group_id":"0","comment":"File object for test event 4 ","deleted":false,"first_seen":null,"last_seen":null,"ObjectReference":[],"Attribute":[{"id":"266269","type":"text","category":"Other","to_ids":false,"uuid":"25d2f181-26ae-4d6f-b4fd-85b9d1f82e67","event_id":"3634","distribution":"5","timestamp":"1621591770","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":true,"object_id":"18208","object_relation":"text","first_seen":null,"last_seen":null,"value":"Free text in the file object","Galaxy":[],"ShadowAttribute":[]},{"id":"266270","type":"sha256","category":"Payload delivery","to_ids":true,"uuid":"4e579782-346b-44b3-b72c-1cae8d87cb25","event_id":"3634","distribution":"5","timestamp":"1621591770","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":false,"object_id":"18208","object_relation":"sha256","first_seen":null,"last_seen":null,"value":"567caa7653723f8818ec9eb6f2e27f6d9d8c0aca0c96fc457659340e7bbdc666","Galaxy":[],"ShadowAttribute":[]},{"id":"266271","type":"filename","category":"Payload delivery","to_ids":true,"uuid":"a40343b5-a480-4288-9b0c-7ae074a77140","event_id":"3634","distribution":"5","timestamp":"1621591770","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":true,"object_id":"18208","object_relation":"filename","first_seen":null,"last_seen":null,"value":"filenameinmispobject.txt","Galaxy":[],"ShadowAttribute":[]}]}],"EventReport":[]}}]} {"response": [{"Event":{"id":"3635","orgc_id":"1","org_id":"1","date":"2021-05-21","threat_level_id":"1","info":"Test event 5 with an object","published":false,"uuid":"8b8786f1-07f2-4bfc-a3f0-e63c22fcc25e","attribute_count":"5","analysis":"0","timestamp":"1621592379","distribution":"1","proposal_email_lock":false,"locked":false,"publish_timestamp":"0","sharing_group_id":"0","disable_correlation":false,"extends_uuid":"","event_creator_email":"admin@admin.test","Org":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488","local":true},"Orgc":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488","local":true},"Attribute":[],"ShadowAttribute":[],"RelatedEvent":[],"Galaxy":[],"Object":[{"id":"18209","name":"file","meta-category":"file","description":"File object describing a file with meta-information","template_uuid":"688c46fb-5edb-40a3-8273-1af7923e2215","template_version":"22","event_id":"3635","uuid":"a62cb6fb-fa1c-45ce-abb8-b46da23631d5","timestamp":"1621592379","distribution":"5","sharing_group_id":"0","comment":"event 5 object comment","deleted":false,"first_seen":null,"last_seen":null,"ObjectReference":[],"Attribute":[{"id":"266272","type":"text","category":"Other","to_ids":false,"uuid":"188a6a15-5704-4e4f-acba-22c55ab08fe8","event_id":"3635","distribution":"5","timestamp":"1621592379","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":true,"object_id":"18209","object_relation":"text","first_seen":null,"last_seen":null,"value":"Object 5 free text attribute in object","Galaxy":[],"ShadowAttribute":[]},{"id":"266273","type":"sha256","category":"Payload delivery","to_ids":true,"uuid":"803f10bd-9087-4169-8699-277579a92693","event_id":"3635","distribution":"5","timestamp":"1621592379","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":false,"object_id":"18209","object_relation":"sha256","first_seen":null,"last_seen":null,"value":"567caa7653723f8818ec9eb6f2e27f6d9d8c0aca0c96fc457659340e7bbdc665","Galaxy":[],"ShadowAttribute":[]},{"id":"266274","type":"filename","category":"Payload delivery","to_ids":true,"uuid":"e5c7a9f0-c0e1-4024-9ab8-de8a1b403e4f","event_id":"3635","distribution":"5","timestamp":"1621592379","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":true,"object_id":"18209","object_relation":"filename","first_seen":null,"last_seen":null,"value":"object5.txt","Galaxy":[],"ShadowAttribute":[]},{"id":"266275","type":"float","category":"Other","to_ids":false,"uuid":"2400b103-4a33-4f92-ac04-a558b6c6e252","event_id":"3635","distribution":"5","timestamp":"1621592379","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":true,"object_id":"18209","object_relation":"entropy","first_seen":null,"last_seen":null,"value":"0.53535445","Galaxy":[],"ShadowAttribute":[]},{"id":"266276","type":"size-in-bytes","category":"Other","to_ids":false,"uuid":"e5ea3ec0-cdf4-4d3e-bd66-a7bf384fd3d7","event_id":"3635","distribution":"5","timestamp":"1621592379","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":true,"object_id":"18209","object_relation":"size-in-bytes","first_seen":null,"last_seen":null,"value":"55555","Galaxy":[],"ShadowAttribute":[]}]}],"EventReport":[]}}]} {"response": [{"Event":{"id":"3633","orgc_id":"1","org_id":"1","date":"2021-05-21","threat_level_id":"1","info":"Test event 3 objects and attributes","published":false,"uuid":"4edb20c7-8175-484d-bdcd-fce6872c1ef3","attribute_count":"6","analysis":"0","timestamp":"1621592532","distribution":"1","proposal_email_lock":false,"locked":false,"publish_timestamp":"0","sharing_group_id":"0","disable_correlation":false,"extends_uuid":"","event_creator_email":"admin@admin.test","Org":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488","local":true},"Orgc":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488","local":true},"Attribute":[{"id":"266263","type":"filename","category":"Payload delivery","to_ids":false,"uuid":"3b322e1a-1dd8-490c-ab96-12e1bc3ee6a3","event_id":"3633","distribution":"5","timestamp":"1621589229","comment":"filename contect for test event 3","sharing_group_id":"0","deleted":false,"disable_correlation":false,"object_id":"0","object_relation":null,"first_seen":null,"last_seen":null,"value":"thetestfile.txt","Galaxy":[],"ShadowAttribute":[]}],"ShadowAttribute":[],"RelatedEvent":[{"Event":{"id":"3631","date":"2021-05-21","threat_level_id":"1","info":"Test event 1 just atrributes","published":false,"uuid":"8ca56ae9-3747-4172-93d2-808da1a4eaf3","analysis":"0","timestamp":"1621588162","distribution":"1","org_id":"1","orgc_id":"1","Org":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488"},"Orgc":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488"}}}],"Galaxy":[],"Object":[{"id":"18207","name":"file","meta-category":"file","description":"File object describing a file with meta-information","template_uuid":"688c46fb-5edb-40a3-8273-1af7923e2215","template_version":"22","event_id":"3633","uuid":"42a88ad4-6834-46a9-a18b-aff9e078a4ea","timestamp":"1621589548","distribution":"5","sharing_group_id":"0","comment":"File object for event 3","deleted":false,"first_seen":null,"last_seen":null,"ObjectReference":[],"Attribute":[{"id":"266264","type":"md5","category":"Payload delivery","to_ids":true,"uuid":"787b3822-0bec-4278-b34a-5d649e7bce05","event_id":"3633","distribution":"5","timestamp":"1621589548","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":false,"object_id":"18207","object_relation":"md5","first_seen":null,"last_seen":null,"value":"70461da8b94c6ca5d2fda3260c5a8c3b","Galaxy":[],"ShadowAttribute":[]},{"id":"266265","type":"sha256","category":"Payload delivery","to_ids":true,"uuid":"657c5f2b-9d68-4ff7-a9ad-ab9e6a6c953e","event_id":"3633","distribution":"5","timestamp":"1621589548","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":false,"object_id":"18207","object_relation":"sha256","first_seen":null,"last_seen":null,"value":"f33c27745f2bd87344be790465ef984a972fd539dc83bd4f61d4242c607ef1ee","Galaxy":[],"ShadowAttribute":[]},{"id":"266266","type":"filename","category":"Payload delivery","to_ids":true,"uuid":"6648d129-9200-431b-9b41-263a84f7c9d2","event_id":"3633","distribution":"5","timestamp":"1621589548","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":true,"object_id":"18207","object_relation":"filename","first_seen":null,"last_seen":null,"value":"filenameofobject.txt","Galaxy":[],"ShadowAttribute":[]},{"id":"266267","type":"text","category":"Other","to_ids":false,"uuid":"ff97cc32-815e-4fc9-9d4b-cab9822027a6","event_id":"3633","distribution":"5","timestamp":"1621589548","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":false,"object_id":"18207","object_relation":"fullpath","first_seen":null,"last_seen":null,"value":"\\the\\fullpath\\to the file\\filenameofobject.txt","Galaxy":[],"ShadowAttribute":[]},{"id":"266268","type":"size-in-bytes","category":"Other","to_ids":false,"uuid":"e378b4d9-43e1-4c64-bd4e-70fce2b4e581","event_id":"3633","distribution":"5","timestamp":"1621589548","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":true,"object_id":"18207","object_relation":"size-in-bytes","first_seen":null,"last_seen":null,"value":"505050","Galaxy":[],"ShadowAttribute":[]}]}],"EventReport":[]}}]} {"response": [{"Event":{"id":"3636","orgc_id":"1","org_id":"1","date":"2021-05-28","threat_level_id":"1","info":"Test event 6 with multiple objects and multiple attributes","published":false,"uuid":"81aea1d1-bb23-4bcd-9b0c-496e9ce028df","attribute_count":"9","analysis":"0","timestamp":"1622200781","distribution":"0","proposal_email_lock":false,"locked":false,"publish_timestamp":"0","sharing_group_id":"0","disable_correlation":false,"extends_uuid":"","event_creator_email":"admin@admin.test","Org":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488","local":true},"Orgc":{"id":"1","name":"ORGNAME","uuid":"78acad2d-cc2d-4785-94d6-b428a0070488","local":true},"Attribute":[{"id":"266277","type":"windows-service-name","category":"Artifacts dropped","to_ids":false,"uuid":"3bd56a61-77f0-4885-8d1c-8bd2e39b65fb","event_id":"3636","distribution":"5","timestamp":"1622200249","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":false,"object_id":"0","object_relation":null,"first_seen":null,"last_seen":null,"value":"badmojopipe","Galaxy":[],"ShadowAttribute":[]}],"ShadowAttribute":[],"RelatedEvent":[],"Galaxy":[],"Object":[{"id":"18210","name":"file","meta-category":"file","description":"File object describing a file with meta-information","template_uuid":"688c46fb-5edb-40a3-8273-1af7923e2215","template_version":"22","event_id":"3636","uuid":"afe43d99-d8b6-47fa-8e7b-3d3ece2f8366","timestamp":"1622200348","distribution":"5","sharing_group_id":"0","comment":"","deleted":false,"first_seen":null,"last_seen":null,"ObjectReference":[],"Attribute":[{"id":"266278","type":"text","category":"Other","to_ids":false,"uuid":"955e34a5-a630-42c9-868d-6e3dcb575987","event_id":"3636","distribution":"5","timestamp":"1622200348","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":true,"object_id":"18210","object_relation":"text","first_seen":null,"last_seen":null,"value":"Excutable create bad pipe","Galaxy":[],"ShadowAttribute":[]},{"id":"266279","type":"md5","category":"Payload delivery","to_ids":true,"uuid":"1c97c043-5de2-41a1-b591-3237174cd290","event_id":"3636","distribution":"5","timestamp":"1622200348","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":false,"object_id":"18210","object_relation":"md5","first_seen":null,"last_seen":null,"value":"7392463caf95534d56460bc9f360adc1","Galaxy":[],"ShadowAttribute":[]},{"id":"266280","type":"filename","category":"Payload delivery","to_ids":true,"uuid":"2dfcb937-e6af-4b5d-ad50-f8eb975990f3","event_id":"3636","distribution":"5","timestamp":"1622200348","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":true,"object_id":"18210","object_relation":"filename","first_seen":null,"last_seen":null,"value":"badmojopipe.exe","Galaxy":[],"ShadowAttribute":[]}]},{"id":"18211","name":"pe-section","meta-category":"file","description":"Object describing a section of a Portable Executable","template_uuid":"198a17d2-a135-4b25-9a32-5aa4e632014a","template_version":"3","event_id":"3636","uuid":"023be568-34d6-4df4-ae88-f4de0dbfcd9d","timestamp":"1622200780","distribution":"5","sharing_group_id":"0","comment":"","deleted":false,"first_seen":null,"last_seen":null,"ObjectReference":[],"Attribute":[{"id":"266281","type":"size-in-bytes","category":"Other","to_ids":false,"uuid":"2fa7721b-ad73-4914-b082-8d44233ced98","event_id":"3636","distribution":"5","timestamp":"1622200780","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":true,"object_id":"18211","object_relation":"size-in-bytes","first_seen":null,"last_seen":null,"value":"3892","Galaxy":[],"ShadowAttribute":[]},{"id":"266282","type":"md5","category":"Payload delivery","to_ids":true,"uuid":"f3b8696e-5390-4383-ace2-6e06bfae497d","event_id":"3636","distribution":"5","timestamp":"1622200780","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":false,"object_id":"18211","object_relation":"md5","first_seen":null,"last_seen":null,"value":"7295463caf95534d56460bc9f360adc1","Galaxy":[],"ShadowAttribute":[]},{"id":"266283","type":"text","category":"Other","to_ids":false,"uuid":"d35c1ff8-a69c-482b-8fb0-1182988d9468","event_id":"3636","distribution":"5","timestamp":"1622200780","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":true,"object_id":"18211","object_relation":"name","first_seen":null,"last_seen":null,"value":".data","Galaxy":[],"ShadowAttribute":[]},{"id":"266284","type":"text","category":"Other","to_ids":false,"uuid":"dc11971a-a676-4676-b24c-a45a8791e0b0","event_id":"3636","distribution":"5","timestamp":"1622200780","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":true,"object_id":"18211","object_relation":"text","first_seen":null,"last_seen":null,"value":"Extracted zip archive data","Galaxy":[],"ShadowAttribute":[]},{"id":"266285","type":"float","category":"Other","to_ids":false,"uuid":"a85c0cbb-25a8-4bc9-b146-3cba1020e5bb","event_id":"3636","distribution":"5","timestamp":"1622200780","comment":"","sharing_group_id":"0","deleted":false,"disable_correlation":true,"object_id":"18211","object_relation":"entropy","first_seen":null,"last_seen":null,"value":"7.93280431051","Galaxy":[],"ShadowAttribute":[]}]}],"EventReport":[]}}]}