Dumped on 2011-01-20

Index of database - cif

Table: apikeys

apikeys Structure
F-Key Name Type Description
id bigserial PRIMARY KEY
userid text UNIQUE#1 NOT NULL
parentid bigint
apikey uuid UNIQUE#1 NOT NULL
revoked boolean
access character varying(100) DEFAULT 'all'::character varying
write boolean
created timestamp with time zone DEFAULT now()

Index - Schema public

Table: domain

domain Structure
F-Key Name Type Description
id bigserial PRIMARY KEY
message.uuid uuid uuid UNIQUE NOT NULL
description text
address text
type character varying(10)
rdata character varying(255)
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
class character varying(10)
ttl integer
whois text
impact character varying(140)
confidence real
source uuid NOT NULL
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Index - Schema public

Table: domain_botnet

domain_botnet Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('domain_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
address text
type character varying(10)
rdata character varying(255)
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
class character varying(10)
ttl integer
whois text
impact character varying(140)
confidence real
source uuid NOT NULL
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table domain_botnet Inherits domain,

Index - Schema public

Table: domain_fastflux

domain_fastflux Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('domain_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
address text
type character varying(10)
rdata character varying(255)
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
class character varying(10)
ttl integer
whois text
impact character varying(140)
confidence real
source uuid NOT NULL
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table domain_fastflux Inherits domain,

Index - Schema public

Table: domain_malware

domain_malware Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('domain_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
address text
type character varying(10)
rdata character varying(255)
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
class character varying(10)
ttl integer
whois text
impact character varying(140)
confidence real
source uuid NOT NULL
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table domain_malware Inherits domain,

Index - Schema public

Table: domain_nameserver

domain_nameserver Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('domain_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
address text
type character varying(10)
rdata character varying(255)
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
class character varying(10)
ttl integer
whois text
impact character varying(140)
confidence real
source uuid NOT NULL
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table domain_nameserver Inherits domain,

Index - Schema public

Table: domain_passivedns

domain_passivedns Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('domain_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
address text
type character varying(10)
rdata character varying(255)
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
class character varying(10)
ttl integer
whois text
impact character varying(140)
confidence real
source uuid NOT NULL
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table domain_passivedns Inherits domain,

Index - Schema public

Table: domain_search

domain_search Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('domain_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
address text
type character varying(10)
rdata character varying(255)
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
class character varying(10)
ttl integer
whois text
impact character varying(140)
confidence real
source uuid NOT NULL
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table domain_search Inherits domain,

Index - Schema public

Table: domain_whitelist

domain_whitelist Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('domain_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
address text
type character varying(10)
rdata character varying(255)
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
class character varying(10)
ttl integer
whois text
impact character varying(140)
confidence real
source uuid NOT NULL
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table domain_whitelist Inherits domain,

Index - Schema public

Table: email

email Structure
F-Key Name Type Description
id bigserial PRIMARY KEY
message.uuid uuid uuid UNIQUE NOT NULL
description text
address text
source uuid
impact character varying(140)
confidence real
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Index - Schema public

Table: email_search

email_search Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('email_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
address text
source uuid
impact character varying(140)
confidence real
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table email_search Inherits email,

Index - Schema public

Table: feed

feed Structure
F-Key Name Type Description
id bigserial PRIMARY KEY
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Index - Schema public

Table: feed_domain

feed_domain Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_domain Inherits feed,

Index - Schema public

Table: feed_domain_botnet

feed_domain_botnet Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_domain_botnet Inherits feed,

Index - Schema public

Table: feed_domain_fastflux

feed_domain_fastflux Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_domain_fastflux Inherits feed,

Index - Schema public

Table: feed_domain_malware

feed_domain_malware Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_domain_malware Inherits feed,

Index - Schema public

Table: feed_domain_nameserver

feed_domain_nameserver Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_domain_nameserver Inherits feed,

Index - Schema public

Table: feed_domain_whitelist

feed_domain_whitelist Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_domain_whitelist Inherits feed,

Index - Schema public

Table: feed_email

feed_email Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_email Inherits feed,

Index - Schema public

Table: feed_infrastructure

feed_infrastructure Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_infrastructure Inherits feed,

Index - Schema public

Table: feed_infrastructure_asn

feed_infrastructure_asn Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_infrastructure_asn Inherits feed,

Index - Schema public

Table: feed_infrastructure_botnet

feed_infrastructure_botnet Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_infrastructure_botnet Inherits feed,

Index - Schema public

Table: feed_infrastructure_malware

feed_infrastructure_malware Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_infrastructure_malware Inherits feed,

Index - Schema public

Table: feed_infrastructure_network

feed_infrastructure_network Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_infrastructure_network Inherits feed,

Index - Schema public

Table: feed_infrastructure_phishing

feed_infrastructure_phishing Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_infrastructure_phishing Inherits feed,

Index - Schema public

Table: feed_infrastructure_scan

feed_infrastructure_scan Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_infrastructure_scan Inherits feed,

Index - Schema public

Table: feed_infrastructure_search

feed_infrastructure_search Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_infrastructure_search Inherits feed,

Index - Schema public

Table: feed_infrastructure_spam

feed_infrastructure_spam Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_infrastructure_spam Inherits feed,

Index - Schema public

Table: feed_infrastructure_suspicious

feed_infrastructure_suspicious Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_infrastructure_suspicious Inherits feed,

Index - Schema public

Table: feed_infrastructure_whitelist

feed_infrastructure_whitelist Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_infrastructure_whitelist Inherits feed,

Index - Schema public

Table: feed_malware

feed_malware Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_malware Inherits feed,

Index - Schema public

Table: feed_url

feed_url Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_url Inherits feed,

Index - Schema public

Table: feed_url_botnet

feed_url_botnet Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_url_botnet Inherits feed,

Index - Schema public

Table: feed_url_malware

feed_url_malware Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_url_malware Inherits feed,

Index - Schema public

Table: feed_url_phishing

feed_url_phishing Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('feed_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text DEFAULT 'feed'::text
source uuid
hash_sha1 character varying(40)
signature text
impact character varying(140) DEFAULT 'feed'::character varying
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()
message text NOT NULL

Table feed_url_phishing Inherits feed,

Index - Schema public

Table: infrastructure

infrastructure Structure
F-Key Name Type Description
id bigserial PRIMARY KEY
message.uuid uuid uuid NOT NULL
description text
impact character varying(140)
address inet NOT NULL
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
protocol integer
portlist character varying(255)
confidence real
source uuid NOT NULL
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
whois text
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

 

infrastructure Constraints
Name Constraint
infrastructure_confidence_check CHECK (((confidence >= (0.0)::double precision) AND ((10.0)::double precision >= confidence)))

Index - Schema public

Table: infrastructure_asn

infrastructure_asn Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('infrastructure_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
impact character varying(140)
address inet NOT NULL
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
protocol integer
portlist character varying(255)
confidence real
source uuid NOT NULL
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
whois text
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table infrastructure_asn Inherits infrastructure,

 

infrastructure_asn Constraints
Name Constraint
infrastructure_confidence_check CHECK (((confidence >= (0.0)::double precision) AND ((10.0)::double precision >= confidence)))

Index - Schema public

Table: infrastructure_botnet

infrastructure_botnet Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('infrastructure_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
impact character varying(140)
address inet NOT NULL
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
protocol integer
portlist character varying(255)
confidence real
source uuid NOT NULL
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
whois text
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table infrastructure_botnet Inherits infrastructure,

 

infrastructure_botnet Constraints
Name Constraint
infrastructure_confidence_check CHECK (((confidence >= (0.0)::double precision) AND ((10.0)::double precision >= confidence)))

Index - Schema public

Table: infrastructure_malware

infrastructure_malware Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('infrastructure_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
impact character varying(140)
address inet NOT NULL
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
protocol integer
portlist character varying(255)
confidence real
source uuid NOT NULL
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
whois text
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table infrastructure_malware Inherits infrastructure,

 

infrastructure_malware Constraints
Name Constraint
infrastructure_confidence_check CHECK (((confidence >= (0.0)::double precision) AND ((10.0)::double precision >= confidence)))

Index - Schema public

Table: infrastructure_network

infrastructure_network Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('infrastructure_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
impact character varying(140)
address inet NOT NULL
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
protocol integer
portlist character varying(255)
confidence real
source uuid NOT NULL
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
whois text
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table infrastructure_network Inherits infrastructure,

 

infrastructure_network Constraints
Name Constraint
infrastructure_confidence_check CHECK (((confidence >= (0.0)::double precision) AND ((10.0)::double precision >= confidence)))

Index - Schema public

Table: infrastructure_phishing

infrastructure_phishing Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('infrastructure_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
impact character varying(140)
address inet NOT NULL
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
protocol integer
portlist character varying(255)
confidence real
source uuid NOT NULL
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
whois text
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table infrastructure_phishing Inherits infrastructure,

 

infrastructure_phishing Constraints
Name Constraint
infrastructure_confidence_check CHECK (((confidence >= (0.0)::double precision) AND ((10.0)::double precision >= confidence)))

Index - Schema public

Table: infrastructure_scanner

infrastructure_scanner Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('infrastructure_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
impact character varying(140)
address inet NOT NULL
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
protocol integer
portlist character varying(255)
confidence real
source uuid NOT NULL
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
whois text
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table infrastructure_scanner Inherits infrastructure,

 

infrastructure_scanner Constraints
Name Constraint
infrastructure_confidence_check CHECK (((confidence >= (0.0)::double precision) AND ((10.0)::double precision >= confidence)))

Index - Schema public

Table: infrastructure_search

infrastructure_search Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('infrastructure_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
impact character varying(140)
address inet NOT NULL
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
protocol integer
portlist character varying(255)
confidence real
source uuid NOT NULL
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
whois text
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table infrastructure_search Inherits infrastructure,

 

infrastructure_search Constraints
Name Constraint
infrastructure_confidence_check CHECK (((confidence >= (0.0)::double precision) AND ((10.0)::double precision >= confidence)))

Index - Schema public

Table: infrastructure_spam

infrastructure_spam Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('infrastructure_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
impact character varying(140)
address inet NOT NULL
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
protocol integer
portlist character varying(255)
confidence real
source uuid NOT NULL
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
whois text
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table infrastructure_spam Inherits infrastructure,

 

infrastructure_spam Constraints
Name Constraint
infrastructure_confidence_check CHECK (((confidence >= (0.0)::double precision) AND ((10.0)::double precision >= confidence)))

Index - Schema public

Table: infrastructure_suspicious

infrastructure_suspicious Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('infrastructure_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
impact character varying(140)
address inet NOT NULL
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
protocol integer
portlist character varying(255)
confidence real
source uuid NOT NULL
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
whois text
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table infrastructure_suspicious Inherits infrastructure,

 

infrastructure_suspicious Constraints
Name Constraint
infrastructure_confidence_check CHECK (((confidence >= (0.0)::double precision) AND ((10.0)::double precision >= confidence)))

Index - Schema public

Table: infrastructure_whitelist

infrastructure_whitelist Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('infrastructure_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
impact character varying(140)
address inet NOT NULL
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
protocol integer
portlist character varying(255)
confidence real
source uuid NOT NULL
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
whois text
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table infrastructure_whitelist Inherits infrastructure,

 

infrastructure_whitelist Constraints
Name Constraint
infrastructure_confidence_check CHECK (((confidence >= (0.0)::double precision) AND ((10.0)::double precision >= confidence)))

Index - Schema public

Table: malware

malware Structure
F-Key Name Type Description
id bigserial PRIMARY KEY
message.uuid uuid uuid UNIQUE NOT NULL
description text
source uuid
hash_md5 character varying(32)
hash_sha1 character varying(40)
content bytea
impact character varying(140)
confidence real
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

 

malware Constraints
Name Constraint
malware_confidence_check CHECK (((confidence >= (0.0)::double precision) AND ((10.0)::double precision >= confidence)))

Index - Schema public

Table: malware_search

malware_search Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('malware_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
source uuid
hash_md5 character varying(32)
hash_sha1 character varying(40)
content bytea
impact character varying(140)
confidence real
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table malware_search Inherits malware,

 

malware_search Constraints
Name Constraint
malware_confidence_check CHECK (((confidence >= (0.0)::double precision) AND ((10.0)::double precision >= confidence)))

Index - Schema public

Table: message

message Structure
F-Key Name Type Description
id bigserial PRIMARY KEY
uuid uuid UNIQUE NOT NULL
source uuid NOT NULL
type character varying(16) NOT NULL
format character varying(32)
confidence real
severity severity
description text
impact character varying(140)
restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Tables referencing this one via Foreign Key Constraints:

Index - Schema public

Table: message_structured

message_structured Structure
F-Key Name Type Description
id bigserial PRIMARY KEY
message.uuid uuid uuid UNIQUE NOT NULL
source uuid NOT NULL
message xml

Index - Schema public

Table: message_unstructured

message_unstructured Structure
F-Key Name Type Description
id bigserial PRIMARY KEY
message.uuid uuid uuid UNIQUE NOT NULL
source uuid NOT NULL
message text NOT NULL

Index - Schema public

Table: url

url Structure
F-Key Name Type Description
id bigserial PRIMARY KEY
message.uuid uuid uuid UNIQUE NOT NULL
description text
address text
url_md5 character varying(32)
url_sha1 character varying(40)
malware_md5 character varying(32)
malware_sha1 character varying(40)
source uuid
impact character varying(140)
confidence real
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Index - Schema public

Table: url_botnet

url_botnet Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('url_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
address text
url_md5 character varying(32)
url_sha1 character varying(40)
malware_md5 character varying(32)
malware_sha1 character varying(40)
source uuid
impact character varying(140)
confidence real
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table url_botnet Inherits url,

Index - Schema public

Table: url_malware

url_malware Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('url_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
address text
url_md5 character varying(32)
url_sha1 character varying(40)
malware_md5 character varying(32)
malware_sha1 character varying(40)
source uuid
impact character varying(140)
confidence real
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table url_malware Inherits url,

Index - Schema public

Table: url_phishing

url_phishing Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('url_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
address text
url_md5 character varying(32)
url_sha1 character varying(40)
malware_md5 character varying(32)
malware_sha1 character varying(40)
source uuid
impact character varying(140)
confidence real
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table url_phishing Inherits url,

Index - Schema public

Table: url_search

url_search Structure
F-Key Name Type Description
id bigint PRIMARY KEY DEFAULT nextval('url_id_seq'::regclass)
message.uuid uuid uuid UNIQUE NOT NULL
description text
address text
url_md5 character varying(32)
url_sha1 character varying(40)
malware_md5 character varying(32)
malware_sha1 character varying(40)
source uuid
impact character varying(140)
confidence real
severity severity
restriction restriction NOT NULL DEFAULT 'private'::restriction
alternativeid text
alternativeid_restriction restriction NOT NULL DEFAULT 'private'::restriction
detecttime timestamp with time zone DEFAULT now()
created timestamp with time zone DEFAULT now()

Table url_search Inherits url,

Index - Schema public

View: v_domain

v_domain Structure
F-Key Name Type Description
address text
rdata character varying(255)
type character varying(10)
ttl integer
impact character varying(140)
severity severity
detecttime timestamp with time zone
created timestamp with time zone 
SELECT domain.address
, domain.rdata
, domain.type
, domain.ttl
, domain.impact
, domain.severity
, domain.detecttime
, domain.created 
FROM domain;

Index - Schema public

View: v_feed

v_feed Structure
F-Key Name Type Description
id bigint
uuid uuid
restriction restriction
severity severity
description text
created timestamp with time zone 
SELECT feed.id
, feed.uuid
, feed.restriction
, feed.severity
, feed.description
, feed.created 
FROM feed;

Index - Schema public

View: v_infrastructure

v_infrastructure Structure
F-Key Name Type Description
id bigint
uuid uuid
description text
impact character varying(140)
address inet
cidr inet
asn integer
asn_desc text
cc character varying(5)
rir character varying(10)
protocol integer
portlist character varying(255)
confidence real
source uuid
severity severity
restriction restriction
alternativeid text
alternativeid_restriction restriction
whois text
detecttime timestamp with time zone
created timestamp with time zone
type character varying(16)
format character varying(32)
structured xml 
SELECT infrastructure.id
, infrastructure.uuid
, infrastructure.description
, infrastructure.impact
, infrastructure.address
, infrastructure.cidr
, infrastructure.asn
, infrastructure.asn_desc
, infrastructure.cc
, infrastructure.rir
, infrastructure.protocol
, infrastructure.portlist
, infrastructure.confidence
, infrastructure.source
, infrastructure.severity
, infrastructure.restriction
, infrastructure.alternativeid
, infrastructure.alternativeid_restriction
, infrastructure.whois
, infrastructure.detecttime
, infrastructure.created
, v_message.type
, v_message.format
, v_message.structured 
FROM (infrastructure 
LEFT JOIN v_message 
    ON (
           (v_message.uuid = infrastructure.uuid)
     )
);

Index - Schema public

View: v_message

v_message Structure
F-Key Name Type Description
id bigint
uuid uuid
source uuid
type character varying(16)
format character varying(32)
confidence real
severity severity
description text
impact character varying(140)
restriction restriction
detecttime timestamp with time zone
created timestamp with time zone
unstructured text
structured xml 
SELECT message.id
, message.uuid
, message.source
, message.type
, message.format
, message.confidence
, message.severity
, message.description
, message.impact
, message.restriction
, message.detecttime
, message.created
, message_unstructured.message AS unstructured
, message_structured.message AS structured 
FROM (
     (message 
   LEFT JOIN message_unstructured 
          ON (
                 (
                       (message_unstructured.uuid = message.uuid)
                     AND (message_unstructured.source = message.source)
                 )
           )
     )
LEFT JOIN message_structured 
    ON (
           (
                 (message_structured.uuid = message.uuid)
               AND (message_structured.source = message.source)
           )
     )
);

Index - Schema public

Generated by PostgreSQL Autodoc

W3C HTML 4.01 Strict