Add scanner and scanner-query to network-profile object

[mFaou]

Hello, I'd like to enrich the network-profile object with two attributes:

• scanner: it would be a string from the following list shodan, censys, zoomeye, onyphe, binaryedge
• scanner-query: it would contain a query (as a string) in the language of the selected scanner

Do you think it's a good idea to add those two fields in the network-profile object or it would be better to create a new object? Once it is decided, I can do a PR.

Thanks.

[mFaou]

@adulau, any opinion on this?

[mokaddem]

Hello, Instead of modifying network-profile objects, what do you think of updating scan-result instead?

[mFaou]

good idea. And can I add shodan, censys, etc in the scan-result-tool list?

[mFaou]

PR: https://github.com/MISP/misp-objects/pull/401

[mFaou]

FYI: https://github.com/MISP/misp-objects/pull/402 We'd like to be able to use the object to store the scan-result-query without necessarily attaching a file. For example we will create additional domain-ip objects and link them to this scan-result object.

[mFaou]

Thanks for the merge and release, I'm closing the ticket