MISP
/
misp-book
mirror of https://github.com/MISP/misp-book
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [type] telfhash added

pull/207/head
Alexandre Dulaunoy 2020-10-13 22:31:47 +02:00
parent 5df2b85367
commit 877f3ffc05
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
categories-and-types/README.md
View File

@ -156,6 +156,7 @@
|target-machine| | | | | | | |target-machine| | | | | | |
|target-org| | | | | | | |target-org| | | | | | |
|target-user| | | | | | | |target-user| | | | | | |
|telfhash| | X | | | | |
|text| X | X | X | X | X | X | |text| X | X | X | X | X | X |
|threat-actor| | | X | | | | |threat-actor| | | X | | | |
|tlsh| | | | | | | |tlsh| | | | | | |
@ -338,6 +339,7 @@
|target-machine| | | | | | | |target-machine| | | | | | |
|target-org| | | | | | | |target-org| | | | | | |
|target-user| | | | | | | |target-user| | | | | | |
|telfhash| | | X | X | | |
|text| X | X | X | X | X | X | |text| X | X | X | X | X | X |
|threat-actor| | | | | | | |threat-actor| | | | | | |
|tlsh| | | X | X | | | |tlsh| | | X | X | | |
@ -520,6 +522,7 @@
|target-machine| | | | X | |target-machine| | | | X |
|target-org| | | | X | |target-org| | | | X |
|target-user| | | | X | |target-user| | | | X |
|telfhash| | | | |
|text| X | X | X | | |text| X | X | X | |
|threat-actor| | | | | |threat-actor| | | | |
|tlsh| | | | | |tlsh| | | | |
@ -722,6 +725,7 @@
* **target-machine**: Attack Targets Machine Name(s) * **target-machine**: Attack Targets Machine Name(s)
* **target-org**: Attack Targets Department or Organization(s) * **target-org**: Attack Targets Department or Organization(s)
* **target-user**: Attack Targets Username(s) * **target-user**: Attack Targets Username(s)
* **telfhash**: telfhash is symbol hash for ELF files, just like imphash is imports hash for PE files.
* **text**: Name, ID or a reference * **text**: Name, ID or a reference
* **threat-actor**: A string identifying the threat actor * **threat-actor**: A string identifying the threat actor
* **tlsh**: A checksum in the Trend Micro Locality Sensitive Hash format * **tlsh**: A checksum in the Trend Micro Locality Sensitive Hash format