misp-objects
misp-objects copied to clipboard
New sinkhole object?
Would it make sense to have a new object dedicated to sinkholes? It would probably look a lot like (if not identical to) the Domain-ip Object, but I wanted to hear what others think about this...
Good question or maybe adding an option about the infrastructure state. There are some tags for sinkhole but it's not super clean how we should contextualise sinkholes.