Entities
by Sergey Yarmonov
1. Report
2. Data Source
2.1. Analyser
2.2. User
2.3. External DB/Feed
3. Observation
3.1. DNSLookup
3.2. WHOISLookup
3.3. ScanSession
3.4. NetworkSession
3.5. Generic
4. Artefact
4.1. FileSample
4.2. Archive
4.3. Pcap
5. Fact
5.1. Relationship Fact
5.2. Attribute Fact
6. Dictionaries
6.1. MalwareFamily
6.2. MalwareClasses
7. Observable
7.1. Relationship
7.2. Entity
7.2.1. Identity
7.2.2. IP Address
7.2.3. Domain Name
7.2.4. URL
7.2.5. Email Address
7.2.6. Phone Number
7.2.7. File