config.json

{
  "Subscribers": [
    {"name": "BDE", "ip": "127.0.0.1", "port": "1337", "api_key": "1234567890"}, 
    {"name": "DIV", "ip": "127.0.0.1", "port": "1337", "api_key": "1234567890"}, 
    {"name": "Corps", "ip": "127.0.0.2", "port": "4444", "api_key": "1234567890"}, 
    {"name": "NEC", "ip": "127.0.0.1", "port": "1337", "api_key": "1234567890"}, 
    {"name": "RCC", "ip": "127.0.0.1", "port": "1337", "api_key": "1234567890"}, 
    {"name": "ACOIC", "ip": "127.0.0.1", "port": "4444", "api_key": "1234567890"}
  ],
  "Locations": [
    "Ziwa",
    "Seattle", 
    "El Paso",
    "Augusta",
    "Lawton"
  ],
  "Organizations": [
    "Weyland-Yutani Corp",
    "Cyberdyne Systems",
    "Evil Corp"
  ], 
  "ObserverTypes": [
    "Firewall",
    "IDS",
    "SIEM Server",
    "EDR Agent",
    "Person"
  ],
  "ObservationTypes": [
    "Reconnaissance",
    "Initial Access",
    "Execution",
    "Persistence",
    "Privilege Escalation",
    "Defense Evasion",
    "Credential Access",
    "Discovery",
    "Lateral Movement",
    "Collection",
    "Command and Control",
    "Exfiltration",
    "Impact"
  ],
  "Indicators": [
    {"IndicatorType": "ipv4-addr", "ValueType": "ipv4"},
    {"IndicatorType": "ipv6-addr", "ValueType": "ipv6"},
    {"IndicatorType": "directory", "ValueType": "string"},
    {"IndicatorType": "domain-name", "ValueType": "string"},
    {"IndicatorType": "email-addr", "ValueType": "string"},
    {"IndicatorType": "file", "ValueType": "string"},
    {"IndicatorType": "mac-addr", "ValueType": "mac"},
    {"IndicatorType": "mutex", "ValueType": "string"},
    {"IndicatorType": "port", "ValueType": "int"},
    {"IndicatorType": "process", "ValueType": "string"},
    {"IndicatorType": "software", "ValueType": "string"},
    {"IndicatorType": "url", "ValueType": "string"},
    {"IndicatorType": "user-account", "ValueType": "string"},
    {"IndicatorType": "windows-registry-key", "ValueType": "string"}
  ]
}