GreyNoise Intelligence · JSON-LD Context
Greynoise Context
JSON-LD context defining the semantic vocabulary for Greynoise from GreyNoise Intelligence.
81 Classes
186 Properties
4 Namespaces
Namespaces
gn:
https://api-evangelist.github.io/greynoise/vocab#
schema:
https://schema.org/
dcterms:
http://purl.org/dc/terms/
xsd:
http://www.w3.org/2001/XMLSchema#
Classes
CVEAdvancedResponse
CVEBasicResponse
CVEMinimalResponse
CVEDetails
CVETimeline
CVEExploitationDetails
CVEExploitationStats
CVEExploitationActivity
CallbackFilterFields
CallbackFileResponse
CallbackIPDetailResponse
CallbackListIPsRequest
CallbackFileSummary
CallbackIPSummary
CallbackListIPsResponse
CallbackThreatNameStat
CallbackOverviewResponse
CommunityResponse
IPTimelineResponse
Session
SessionConnectionsResponse
SessionConnectionNode
SessionConnectionLink
SessionCountsResponse
SessionCountItem
SessionFieldsResponse
SessionField
SessionsResponse
SessionPagination
SessionRequestMetadata
SessionTimeseriesResponse
SessionTimeseriesPoint
SessionTimeseriesItem
MetadataV3
TimeSeriesResponse
TimeSeriesRecord
TimeSeriesIntelligence
TimeSeriesRawData
TimeSeriesScanEntry
TimeSeriesJA3Entry
TimeSeriesHASSHEntry
TimeSeriesHTTPData
TimeSeriesSourceData
TimeSeriesTLSData
TimeSeriesSSHData
TimeSeriesTCPData
TimeSeriesStatsResponse
TimeSeriesStatsRecord
GNQLIPContextV3
InternetScannerIntelligence
BusinessServiceIntelligence
QuickBusinessServiceIntelligence
QuickInternetScannerIntelligence
QuickIpProfile
IPResponseV3Tags
QuickGNQLV3Response
GNQLV3Response
GNQLV3ResponseMetadata
GNQLStats
TagsMetadata
IPResponseV3
QuickMultiIPResponseV3
MultiIPResponseV3
IpResponseMetadataV3
MultiIpRequest
details
timeline
exploitation_details
exploitation_stats
exploitation_activity
metadata
request_metadata
pagination
internet_scanner_intelligence
raw_data
http
tls
ssh
tcp
business_service_intelligence
stats
Properties
| Property | Type | Container |
|---|---|---|
| id | string | |
| vulnerability_name | string | |
| vulnerability_description | string | |
| cve_cvss_score | double | |
| product | string | |
| vendor | string | |
| published_to_nist_nvd | boolean | |
| cve_published_date | date | |
| cve_last_updated_date | date | |
| first_known_published_date | date | |
| cisa_kev_date_added | date | |
| attack_vector | string | |
| exploit_found | boolean | |
| exploitation_registered_in_kev | boolean | |
| epss_score | double | |
| number_of_available_exploits | integer | |
| number_of_threat_actors_exploiting_vulnerability | integer | |
| number_of_botnets_exploiting_vulnerability | integer | |
| activity_seen | boolean | |
| benign_ip_count_1d | integer | |
| benign_ip_count_10d | integer | |
| benign_ip_count_30d | integer | |
| threat_ip_count_1d | integer | |
| threat_ip_count_10d | integer | |
| threat_ip_count_30d | integer | |
| is_stage_1 | boolean | |
| is_stage_2 | boolean | |
| first_seen_after | date | |
| first_seen_before | date | |
| last_seen_after | date | |
| last_seen_before | date | |
| has_files | boolean | |
| file_type | string | |
| file_name | string | |
| file_hash | string | |
| scanner_ips | set | |
| ips | set | |
| sha256 | string | |
| md5 | string | |
| sha1 | string | |
| threat_name | string | |
| vt_detection_count | integer | |
| vt_engine_count | integer | |
| size | integer | |
| type | string | |
| ip | string | |
| source_workspaces | set | |
| first_seen | string | |
| last_seen | string | |
| scanner_count | integer | |
| file_count | integer | |
| active_files | set | |
| vt_threat_name | string | |
| files | set | |
| items | set | |
| total | integer | |
| page | integer | |
| page_size | integer | |
| ip_count | integer | |
| total_ips | integer | |
| stage_1_ips | integer | |
| stage_2_ips | integer | |
| total_files | integer | |
| files_with_vt | integer | |
| files_without_vt | integer | |
| total_cross_refs | integer | |
| total_scanner_links | integer | |
| ips_with_files | integer | |
| ips_without_files | integer | |
| ips_with_scanners | integer | |
| ips_without_scanners | integer | |
| distinct_scanners | integer | |
| top_threat_names | set | |
| noise | boolean | |
| riot | boolean | |
| classification | string | |
| name | string | |
| link | string | |
| message | string | |
| results | set | |
| _id | string | |
| firstPacket | dateTime | |
| lastPacket | dateTime | |
| source.ip | string | |
| source.port | integer | |
| destination.ip | string | |
| destination.port | integer | |
| source.bytes | integer | |
| source.packets | integer | |
| destination.bytes | integer | |
| destination.packets | integer | |
| nodes | set | |
| links | set | |
| source | string | |
| target | string | |
| value | integer | |
| label | string | |
| count | integer | |
| children | set | |
| fields | set | |
| description | string | |
| group | string | |
| sortable | boolean | |
| sessions | set | |
| sort_by | string | |
| sort_desc | boolean | |
| start_time | string | |
| end_time | string | |
| query | string | |
| timeseries | set | |
| timestamp | string | |
| mobile | boolean | |
| source_country | string | |
| source_country_code | string | |
| source_city | string | |
| region | string | |
| organization | string | |
| rdns | string | |
| asn | string | |
| category | string | |
| os | string | |
| destination_countries | set | |
| destination_country_codes | set | |
| destination_cities | set | |
| destination_asns | set | |
| single_destination | boolean | |
| carrier | string | |
| datacenter | string | |
| domain | string | |
| rdns_parent | string | |
| rdns_validated | boolean | |
| latitude | double | |
| longitude | double | |
| sensor_count | integer | |
| sensor_hits | integer | |
| found | boolean | |
| tags | set | |
| actor | string | |
| spoofable | boolean | |
| cves | set | |
| vpn | boolean | |
| vpn_service | string | |
| tor | boolean | |
| last_seen_timestamp | dateTime | |
| scan | set | |
| ja3 | set | |
| hassh | set | |
| port | integer | |
| protocol | string | |
| fingerprint | string | |
| cookie_keys | set | |
| request_authorization | set | |
| request_cookies | set | |
| request_header | set | |
| method | set | |
| path | set | |
| request_origin | set | |
| useragent | set | |
| ja4h | set | |
| bytes | integer | |
| cipher | set | |
| ja4 | set | |
| key | set | |
| ja4ssh | set | |
| ja4t | set | |
| ja4l | string | |
| min | integer | |
| max | integer | |
| data | set | |
| date | string | |
| seen | boolean | |
| explanation | string | |
| last_updated | string | |
| reference | string | |
| trust_level | string | |
| slug | string | |
| intention | string | |
| references | set | |
| recommend_block | boolean | |
| created_at | string | |
| updated_at | string | |
| complete | boolean | |
| scroll | string | |
| adjusted_query | string | |
| restricted_fields | set | |
| ips_not_found | set |
JSON-LD Document
{
"@context": {
"@version": 1.1,
"gn": "https://api-evangelist.github.io/greynoise/vocab#",
"schema": "https://schema.org/",
"dcterms": "http://purl.org/dc/terms/",
"xsd": "http://www.w3.org/2001/XMLSchema#",
"CVEAdvancedResponse": "gn:CVEAdvancedResponse",
"CVEBasicResponse": "gn:CVEBasicResponse",
"CVEMinimalResponse": "gn:CVEMinimalResponse",
"CVEDetails": "gn:CVEDetails",
"CVETimeline": "gn:CVETimeline",
"CVEExploitationDetails": "gn:CVEExploitationDetails",
"CVEExploitationStats": "gn:CVEExploitationStats",
"CVEExploitationActivity": "gn:CVEExploitationActivity",
"CallbackFilterFields": "gn:CallbackFilterFields",
"CallbackFileResponse": "gn:CallbackFileResponse",
"CallbackIPDetailResponse": "gn:CallbackIPDetailResponse",
"CallbackListIPsRequest": "gn:CallbackListIPsRequest",
"CallbackFileSummary": "gn:CallbackFileSummary",
"CallbackIPSummary": "gn:CallbackIPSummary",
"CallbackListIPsResponse": "gn:CallbackListIPsResponse",
"CallbackThreatNameStat": "gn:CallbackThreatNameStat",
"CallbackOverviewResponse": "gn:CallbackOverviewResponse",
"CommunityResponse": "gn:CommunityResponse",
"IPTimelineResponse": "gn:IPTimelineResponse",
"Session": "gn:Session",
"SessionConnectionsResponse": "gn:SessionConnectionsResponse",
"SessionConnectionNode": "gn:SessionConnectionNode",
"SessionConnectionLink": "gn:SessionConnectionLink",
"SessionCountsResponse": "gn:SessionCountsResponse",
"SessionCountItem": "gn:SessionCountItem",
"SessionFieldsResponse": "gn:SessionFieldsResponse",
"SessionField": "gn:SessionField",
"SessionsResponse": "gn:SessionsResponse",
"SessionPagination": "gn:SessionPagination",
"SessionRequestMetadata": "gn:SessionRequestMetadata",
"SessionTimeseriesResponse": "gn:SessionTimeseriesResponse",
"SessionTimeseriesPoint": "gn:SessionTimeseriesPoint",
"SessionTimeseriesItem": "gn:SessionTimeseriesItem",
"MetadataV3": "gn:MetadataV3",
"TimeSeriesResponse": "gn:TimeSeriesResponse",
"TimeSeriesRecord": "gn:TimeSeriesRecord",
"TimeSeriesIntelligence": "gn:TimeSeriesIntelligence",
"TimeSeriesRawData": "gn:TimeSeriesRawData",
"TimeSeriesScanEntry": "gn:TimeSeriesScanEntry",
"TimeSeriesJA3Entry": "gn:TimeSeriesJA3Entry",
"TimeSeriesHASSHEntry": "gn:TimeSeriesHASSHEntry",
"TimeSeriesHTTPData": "gn:TimeSeriesHTTPData",
"TimeSeriesSourceData": "gn:TimeSeriesSourceData",
"TimeSeriesTLSData": "gn:TimeSeriesTLSData",
"TimeSeriesSSHData": "gn:TimeSeriesSSHData",
"TimeSeriesTCPData": "gn:TimeSeriesTCPData",
"TimeSeriesStatsResponse": "gn:TimeSeriesStatsResponse",
"TimeSeriesStatsRecord": "gn:TimeSeriesStatsRecord",
"GNQLIPContextV3": "gn:GNQLIPContextV3",
"InternetScannerIntelligence": "gn:InternetScannerIntelligence",
"BusinessServiceIntelligence": "gn:BusinessServiceIntelligence",
"QuickBusinessServiceIntelligence": "gn:QuickBusinessServiceIntelligence",
"QuickInternetScannerIntelligence": "gn:QuickInternetScannerIntelligence",
"QuickIpProfile": "gn:QuickIpProfile",
"IPResponseV3Tags": "gn:IPResponseV3Tags",
"QuickGNQLV3Response": "gn:QuickGNQLV3Response",
"GNQLV3Response": "gn:GNQLV3Response",
"GNQLV3ResponseMetadata": "gn:GNQLV3ResponseMetadata",
"GNQLStats": "gn:GNQLStats",
"TagsMetadata": "gn:TagsMetadata",
"IPResponseV3": "gn:IPResponseV3",
"QuickMultiIPResponseV3": "gn:QuickMultiIPResponseV3",
"MultiIPResponseV3": "gn:MultiIPResponseV3",
"IpResponseMetadataV3": "gn:IpResponseMetadataV3",
"MultiIpRequest": "gn:MultiIpRequest",
"id": {
"@id": "gn:id",
"@type": "xsd:string"
},
"details": "gn:details",
"timeline": "gn:timeline",
"exploitation_details": "gn:exploitation_details",
"exploitation_stats": "gn:exploitation_stats",
"exploitation_activity": "gn:exploitation_activity",
"vulnerability_name": {
"@id": "gn:vulnerability_name",
"@type": "xsd:string"
},
"vulnerability_description": {
"@id": "gn:vulnerability_description",
"@type": "xsd:string"
},
"cve_cvss_score": {
"@id": "gn:cve_cvss_score",
"@type": "xsd:double"
},
"product": {
"@id": "gn:product",
"@type": "xsd:string"
},
"vendor": {
"@id": "gn:vendor",
"@type": "xsd:string"
},
"published_to_nist_nvd": {
"@id": "gn:published_to_nist_nvd",
"@type": "xsd:boolean"
},
"cve_published_date": {
"@id": "gn:cve_published_date",
"@type": "xsd:date"
},
"cve_last_updated_date": {
"@id": "gn:cve_last_updated_date",
"@type": "xsd:date"
},
"first_known_published_date": {
"@id": "gn:first_known_published_date",
"@type": "xsd:date"
},
"cisa_kev_date_added": {
"@id": "gn:cisa_kev_date_added",
"@type": "xsd:date"
},
"attack_vector": {
"@id": "gn:attack_vector",
"@type": "xsd:string"
},
"exploit_found": {
"@id": "gn:exploit_found",
"@type": "xsd:boolean"
},
"exploitation_registered_in_kev": {
"@id": "gn:exploitation_registered_in_kev",
"@type": "xsd:boolean"
},
"epss_score": {
"@id": "gn:epss_score",
"@type": "xsd:double"
},
"number_of_available_exploits": {
"@id": "gn:number_of_available_exploits",
"@type": "xsd:integer"
},
"number_of_threat_actors_exploiting_vulnerability": {
"@id": "gn:number_of_threat_actors_exploiting_vulnerability",
"@type": "xsd:integer"
},
"number_of_botnets_exploiting_vulnerability": {
"@id": "gn:number_of_botnets_exploiting_vulnerability",
"@type": "xsd:integer"
},
"activity_seen": {
"@id": "gn:activity_seen",
"@type": "xsd:boolean"
},
"benign_ip_count_1d": {
"@id": "gn:benign_ip_count_1d",
"@type": "xsd:integer"
},
"benign_ip_count_10d": {
"@id": "gn:benign_ip_count_10d",
"@type": "xsd:integer"
},
"benign_ip_count_30d": {
"@id": "gn:benign_ip_count_30d",
"@type": "xsd:integer"
},
"threat_ip_count_1d": {
"@id": "gn:threat_ip_count_1d",
"@type": "xsd:integer"
},
"threat_ip_count_10d": {
"@id": "gn:threat_ip_count_10d",
"@type": "xsd:integer"
},
"threat_ip_count_30d": {
"@id": "gn:threat_ip_count_30d",
"@type": "xsd:integer"
},
"is_stage_1": {
"@id": "gn:is_stage_1",
"@type": "xsd:boolean"
},
"is_stage_2": {
"@id": "gn:is_stage_2",
"@type": "xsd:boolean"
},
"first_seen_after": {
"@id": "gn:first_seen_after",
"@type": "xsd:date"
},
"first_seen_before": {
"@id": "gn:first_seen_before",
"@type": "xsd:date"
},
"last_seen_after": {
"@id": "gn:last_seen_after",
"@type": "xsd:date"
},
"last_seen_before": {
"@id": "gn:last_seen_before",
"@type": "xsd:date"
},
"has_files": {
"@id": "gn:has_files",
"@type": "xsd:boolean"
},
"file_type": {
"@id": "gn:file_type",
"@type": "xsd:string"
},
"file_name": {
"@id": "gn:file_name",
"@type": "xsd:string"
},
"file_hash": {
"@id": "gn:file_hash",
"@type": "xsd:string"
},
"scanner_ips": {
"@id": "gn:scanner_ips",
"@container": "@set"
},
"ips": {
"@id": "gn:ips",
"@container": "@set"
},
"sha256": {
"@id": "gn:sha256",
"@type": "xsd:string"
},
"md5": {
"@id": "gn:md5",
"@type": "xsd:string"
},
"sha1": {
"@id": "gn:sha1",
"@type": "xsd:string"
},
"threat_name": {
"@id": "gn:threat_name",
"@type": "xsd:string"
},
"vt_detection_count": {
"@id": "gn:vt_detection_count",
"@type": "xsd:integer"
},
"vt_engine_count": {
"@id": "gn:vt_engine_count",
"@type": "xsd:integer"
},
"size": {
"@id": "gn:size",
"@type": "xsd:integer"
},
"type": {
"@id": "gn:type",
"@type": "xsd:string"
},
"ip": {
"@id": "gn:ipAddress",
"@type": "xsd:string"
},
"source_workspaces": {
"@id": "gn:source_workspaces",
"@container": "@set"
},
"first_seen": {
"@id": "schema:dateCreated",
"@type": "xsd:string"
},
"last_seen": {
"@id": "schema:dateModified",
"@type": "xsd:string"
},
"scanner_count": {
"@id": "gn:scanner_count",
"@type": "xsd:integer"
},
"file_count": {
"@id": "gn:file_count",
"@type": "xsd:integer"
},
"active_files": {
"@id": "gn:active_files",
"@container": "@set"
},
"vt_threat_name": {
"@id": "gn:vt_threat_name",
"@type": "xsd:string"
},
"files": {
"@id": "gn:files",
"@container": "@set"
},
"items": {
"@id": "gn:items",
"@container": "@set"
},
"total": {
"@id": "gn:total",
"@type": "xsd:integer"
},
"page": {
"@id": "gn:page",
"@type": "xsd:integer"
},
"page_size": {
"@id": "gn:page_size",
"@type": "xsd:integer"
},
"ip_count": {
"@id": "gn:ip_count",
"@type": "xsd:integer"
},
"total_ips": {
"@id": "gn:total_ips",
"@type": "xsd:integer"
},
"stage_1_ips": {
"@id": "gn:stage_1_ips",
"@type": "xsd:integer"
},
"stage_2_ips": {
"@id": "gn:stage_2_ips",
"@type": "xsd:integer"
},
"total_files": {
"@id": "gn:total_files",
"@type": "xsd:integer"
},
"files_with_vt": {
"@id": "gn:files_with_vt",
"@type": "xsd:integer"
},
"files_without_vt": {
"@id": "gn:files_without_vt",
"@type": "xsd:integer"
},
"total_cross_refs": {
"@id": "gn:total_cross_refs",
"@type": "xsd:integer"
},
"total_scanner_links": {
"@id": "gn:total_scanner_links",
"@type": "xsd:integer"
},
"ips_with_files": {
"@id": "gn:ips_with_files",
"@type": "xsd:integer"
},
"ips_without_files": {
"@id": "gn:ips_without_files",
"@type": "xsd:integer"
},
"ips_with_scanners": {
"@id": "gn:ips_with_scanners",
"@type": "xsd:integer"
},
"ips_without_scanners": {
"@id": "gn:ips_without_scanners",
"@type": "xsd:integer"
},
"distinct_scanners": {
"@id": "gn:distinct_scanners",
"@type": "xsd:integer"
},
"top_threat_names": {
"@id": "gn:top_threat_names",
"@container": "@set"
},
"noise": {
"@id": "gn:noise",
"@type": "xsd:boolean"
},
"riot": {
"@id": "gn:riot",
"@type": "xsd:boolean"
},
"classification": {
"@id": "gn:classification",
"@type": "xsd:string"
},
"name": {
"@id": "schema:name",
"@type": "xsd:string"
},
"link": {
"@id": "schema:url",
"@type": "xsd:string"
},
"message": {
"@id": "gn:message",
"@type": "xsd:string"
},
"results": {
"@id": "gn:results",
"@container": "@set"
},
"metadata": "gn:metadata",
"_id": {
"@id": "gn:_id",
"@type": "xsd:string"
},
"firstPacket": {
"@id": "gn:firstPacket",
"@type": "xsd:dateTime"
},
"lastPacket": {
"@id": "gn:lastPacket",
"@type": "xsd:dateTime"
},
"source.ip": {
"@id": "gn:source.ip",
"@type": "xsd:string"
},
"source.port": {
"@id": "gn:source.port",
"@type": "xsd:integer"
},
"destination.ip": {
"@id": "gn:destination.ip",
"@type": "xsd:string"
},
"destination.port": {
"@id": "gn:destination.port",
"@type": "xsd:integer"
},
"source.bytes": {
"@id": "gn:source.bytes",
"@type": "xsd:integer"
},
"source.packets": {
"@id": "gn:source.packets",
"@type": "xsd:integer"
},
"destination.bytes": {
"@id": "gn:destination.bytes",
"@type": "xsd:integer"
},
"destination.packets": {
"@id": "gn:destination.packets",
"@type": "xsd:integer"
},
"nodes": {
"@id": "gn:nodes",
"@container": "@set"
},
"links": {
"@id": "gn:links",
"@container": "@set"
},
"request_metadata": "gn:request_metadata",
"source": {
"@id": "gn:source",
"@type": "xsd:string"
},
"target": {
"@id": "gn:target",
"@type": "xsd:string"
},
"value": {
"@id": "gn:value",
"@type": "xsd:integer"
},
"label": {
"@id": "gn:label",
"@type": "xsd:string"
},
"count": {
"@id": "gn:count",
"@type": "xsd:integer"
},
"children": {
"@id": "gn:children",
"@container": "@set"
},
"fields": {
"@id": "gn:fields",
"@container": "@set"
},
"description": {
"@id": "schema:description",
"@type": "xsd:string"
},
"group": {
"@id": "gn:group",
"@type": "xsd:string"
},
"sortable": {
"@id": "gn:sortable",
"@type": "xsd:boolean"
},
"sessions": {
"@id": "gn:sessions",
"@container": "@set"
},
"pagination": "gn:pagination",
"sort_by": {
"@id": "gn:sort_by",
"@type": "xsd:string"
},
"sort_desc": {
"@id": "gn:sort_desc",
"@type": "xsd:boolean"
},
"start_time": {
"@id": "gn:start_time",
"@type": "xsd:string"
},
"end_time": {
"@id": "gn:end_time",
"@type": "xsd:string"
},
"query": {
"@id": "gn:query",
"@type": "xsd:string"
},
"timeseries": {
"@id": "gn:timeseries",
"@container": "@set"
},
"timestamp": {
"@id": "gn:timestamp",
"@type": "xsd:string"
},
"mobile": {
"@id": "gn:mobile",
"@type": "xsd:boolean"
},
"source_country": {
"@id": "gn:source_country",
"@type": "xsd:string"
},
"source_country_code": {
"@id": "gn:source_country_code",
"@type": "xsd:string"
},
"source_city": {
"@id": "gn:source_city",
"@type": "xsd:string"
},
"region": {
"@id": "schema:addressRegion",
"@type": "xsd:string"
},
"organization": {
"@id": "schema:provider",
"@type": "xsd:string"
},
"rdns": {
"@id": "gn:rdns",
"@type": "xsd:string"
},
"asn": {
"@id": "gn:asn",
"@type": "xsd:string"
},
"category": {
"@id": "gn:category",
"@type": "xsd:string"
},
"os": {
"@id": "gn:os",
"@type": "xsd:string"
},
"destination_countries": {
"@id": "gn:destination_countries",
"@container": "@set"
},
"destination_country_codes": {
"@id": "gn:destination_country_codes",
"@container": "@set"
},
"destination_cities": {
"@id": "gn:destination_cities",
"@container": "@set"
},
"destination_asns": {
"@id": "gn:destination_asns",
"@container": "@set"
},
"single_destination": {
"@id": "gn:single_destination",
"@type": "xsd:boolean"
},
"carrier": {
"@id": "gn:carrier",
"@type": "xsd:string"
},
"datacenter": {
"@id": "gn:datacenter",
"@type": "xsd:string"
},
"domain": {
"@id": "schema:domainName",
"@type": "xsd:string"
},
"rdns_parent": {
"@id": "gn:rdns_parent",
"@type": "xsd:string"
},
"rdns_validated": {
"@id": "gn:rdns_validated",
"@type": "xsd:boolean"
},
"latitude": {
"@id": "schema:latitude",
"@type": "xsd:double"
},
"longitude": {
"@id": "schema:longitude",
"@type": "xsd:double"
},
"sensor_count": {
"@id": "gn:sensor_count",
"@type": "xsd:integer"
},
"sensor_hits": {
"@id": "gn:sensor_hits",
"@type": "xsd:integer"
},
"internet_scanner_intelligence": "gn:internet_scanner_intelligence",
"found": {
"@id": "gn:found",
"@type": "xsd:boolean"
},
"tags": {
"@id": "gn:tags",
"@container": "@set"
},
"actor": {
"@id": "gn:actor",
"@type": "xsd:string"
},
"spoofable": {
"@id": "gn:spoofable",
"@type": "xsd:boolean"
},
"cves": {
"@id": "gn:cves",
"@container": "@set"
},
"vpn": {
"@id": "gn:vpn",
"@type": "xsd:boolean"
},
"vpn_service": {
"@id": "gn:vpn_service",
"@type": "xsd:string"
},
"tor": {
"@id": "gn:tor",
"@type": "xsd:boolean"
},
"last_seen_timestamp": {
"@id": "gn:last_seen_timestamp",
"@type": "xsd:dateTime"
},
"raw_data": "gn:raw_data",
"scan": {
"@id": "gn:scan",
"@container": "@set"
},
"ja3": {
"@id": "gn:ja3",
"@container": "@set"
},
"hassh": {
"@id": "gn:hassh",
"@container": "@set"
},
"http": "gn:http",
"tls": "gn:tls",
"ssh": "gn:ssh",
"tcp": "gn:tcp",
"port": {
"@id": "gn:port",
"@type": "xsd:integer"
},
"protocol": {
"@id": "gn:protocol",
"@type": "xsd:string"
},
"fingerprint": {
"@id": "gn:fingerprint",
"@type": "xsd:string"
},
"cookie_keys": {
"@id": "gn:cookie_keys",
"@container": "@set"
},
"request_authorization": {
"@id": "gn:request_authorization",
"@container": "@set"
},
"request_cookies": {
"@id": "gn:request_cookies",
"@container": "@set"
},
"request_header": {
"@id": "gn:request_header",
"@container": "@set"
},
"method": {
"@id": "gn:method",
"@container": "@set"
},
"path": {
"@id": "gn:path",
"@container": "@set"
},
"request_origin": {
"@id": "gn:request_origin",
"@container": "@set"
},
"useragent": {
"@id": "gn:useragent",
"@container": "@set"
},
"ja4h": {
"@id": "gn:ja4h",
"@container": "@set"
},
"bytes": {
"@id": "gn:bytes",
"@type": "xsd:integer"
},
"cipher": {
"@id": "gn:cipher",
"@container": "@set"
},
"ja4": {
"@id": "gn:ja4",
"@container": "@set"
},
"key": {
"@id": "gn:key",
"@container": "@set"
},
"ja4ssh": {
"@id": "gn:ja4ssh",
"@container": "@set"
},
"ja4t": {
"@id": "gn:ja4t",
"@container": "@set"
},
"ja4l": {
"@id": "gn:ja4l",
"@type": "xsd:string"
},
"min": {
"@id": "gn:min",
"@type": "xsd:integer"
},
"max": {
"@id": "gn:max",
"@type": "xsd:integer"
},
"data": {
"@id": "gn:data",
"@container": "@set"
},
"date": {
"@id": "gn:date",
"@type": "xsd:string"
},
"business_service_intelligence": "gn:business_service_intelligence",
"seen": {
"@id": "gn:seen",
"@type": "xsd:boolean"
},
"explanation": {
"@id": "gn:explanation",
"@type": "xsd:string"
},
"last_updated": {
"@id": "gn:last_updated",
"@type": "xsd:string"
},
"reference": {
"@id": "gn:reference",
"@type": "xsd:string"
},
"trust_level": {
"@id": "gn:trust_level",
"@type": "xsd:string"
},
"slug": {
"@id": "gn:slug",
"@type": "xsd:string"
},
"intention": {
"@id": "gn:intention",
"@type": "xsd:string"
},
"references": {
"@id": "gn:references",
"@container": "@set"
},
"recommend_block": {
"@id": "gn:recommend_block",
"@type": "xsd:boolean"
},
"created_at": {
"@id": "gn:created_at",
"@type": "xsd:string"
},
"updated_at": {
"@id": "gn:updated_at",
"@type": "xsd:string"
},
"complete": {
"@id": "gn:complete",
"@type": "xsd:boolean"
},
"scroll": {
"@id": "gn:scroll",
"@type": "xsd:string"
},
"adjusted_query": {
"@id": "gn:adjusted_query",
"@type": "xsd:string"
},
"restricted_fields": {
"@id": "gn:restricted_fields",
"@container": "@set"
},
"stats": "gn:stats",
"ips_not_found": {
"@id": "gn:ips_not_found",
"@container": "@set"
}
}
}