malware.schema.json

{
    "$schema": "http://json-schema.org/draft-07/schema#",
    "title": "XARF MALWARE",
    "description": "A format to report MALWARE events.",
    "allOf": [
        {
            "$ref": "xarf_shared.schema.json#/XarfBase"
        },
        {
            "type": "object",
            "properties": {
                "Report": {
                    "allOf": [
                        {
                            "$ref": "xarf_shared.schema.json#/IpBasedReport"
                        },
                        {
                            "type": "object",
                            "properties": {
                                "ReportClass": {
                                    "type": "string",
                                    "enum": [
                                        "Content"
                                    ]
                                },
                                "ReportType": {
                                    "type": "string",
                                    "enum": [
                                        "Malware"
                                    ]
                                },
                                "SourceUrl": {
                                    "type": "string",
                                    "description": "where the content is available",
                                    "format": "uri"
                                },
                                "MalwareName": {
                                    "type": "string",
                                    "description": "name of the malware",
                                    "format": "uri"
                                }
                            },
                            "required": [
                                "SourceUrl"
                            ]
                        },
                        {
                            "$ref": "xarf_shared.schema.json#/CommonProps"
                        }
                    ]
                }
            }
        }
    ]
}