- add spamvertised schema

abusix · Aug 2, 2024 · 5c219ad · 5c219ad
1 parent 5b178c7
commit 5c219ad
Show file tree

Hide file tree

Showing 3 changed files with 80 additions and 0 deletions.
diff --git a/samples/positive/development/spamvertised_sample.json b/samples/positive/development/spamvertised_sample.json
@@ -0,0 +1,32 @@
+{
+  "Version": "development",
+  "ReporterInfo": {
+    "ReporterOrg": "ExampleOrg",
+    "ReporterOrgDomain": "example.com",
+    "ReporterOrgEmail": "[email protected]",
+    "ReporterContactEmail": "[email protected]",
+    "ReporterContactName": "Mr. Example",
+    "ReporterContactPhone": "+ 01 000 1234567"
+  },
+  "Disclosure": true,
+  "Report": {
+    "ReportClass": "Activity",
+    "ReportType": "Spamvertised",
+    "Date": "2024-08-03T14:17:10Z",
+    "SourceIp": "192.0.2.55",
+    "SourcePort": 54321,
+    "SourceUrl": "http://bad-spamvertised.spam",
+    "DestinationIp": "198.51.100.33",
+    "DestinationPort": 25,
+    "SmtpMailFromAddress": "[email protected]",
+    "SmtpRcptToAddress": "[email protected]",
+    "Samples": [
+      {
+        "ContentType": "message/rfc822",
+        "Base64Encoded": true,
+        "Description": "The spamvertised mail",
+        "Payload": "bWFpbA=="
+      }
+    ]
+  }
+}
diff --git a/schemas/development/spamvertised.schema.json b/schemas/development/spamvertised.schema.json
@@ -0,0 +1,45 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://raw.githubusercontent.com/xarf/schema-discussion/master/schemas/development/spamvertised.schema.json",
+  "title": "XARF SPAMVERTISED",
+  "description": "A format to report SPAMVERTISED events.",
+  "allOf": [
+    {
+      "$ref": "xarf_shared.schema.json#/properties/XarfBase"
+    },
+    {
+      "type": "object",
+      "properties": {
+        "Report": {
+          "allOf": [
+            {
+              "$ref": "xarf_shared.schema.json#/properties/IpAndUrlBasedReport"
+            },
+            {
+              "type": "object",
+              "properties": {
+                "ReportClass": {
+                  "type": "string",
+                  "enum": ["Activity"]
+                },
+                "ReportType": {
+                  "type": "string",
+                  "enum": ["Spamvertised"]
+                }
+              }
+            },
+            {
+              "$ref": "xarf_shared.schema.json#/properties/WithDestination"
+            },
+            {
+              "$ref": "xarf_shared.schema.json#/properties/CommonProps"
+            },
+            {
+              "$ref": "xarf_shared.schema.json#/properties/EMail"
+            }
+          ]
+        }
+      }
+    }
+  ]
+}
diff --git a/schemas/development/xarf.schema.json b/schemas/development/xarf.schema.json
@@ -51,6 +51,9 @@
     },
     {
       "$ref": "harassment.schema.json"
+    },
+    {
+      "$ref": "spamvertised.schema.json"
     }
   ]
 }
-Original file line number
+Diff line change
@@ Expand Up / @@ -51,6 +51,9 @@ @@
         },
         {
           "$ref": "harassment.schema.json"
+        },
+        {
+          "$ref": "spamvertised.schema.json"
         }
       ]
     }