mirror of https://github.com/MISP/misp-objects
53 lines
1.4 KiB
JSON
53 lines
1.4 KiB
JSON
|
{
|
||
|
|
"attributes": {
|
||
|
|
"data": {
|
||
|
|
"categories": [
|
||
|
|
"Persistence mechanism"
|
||
|
|
],
|
||
|
|
"description": "Data stored in the registry key value",
|
||
|
|
"misp-attribute": "text",
|
||
|
|
"ui-priority": 1
|
||
|
|
},
|
||
|
|
"data-type": {
|
||
|
|
"categories": [
|
||
|
|
"Persistence mechanism"
|
||
|
|
],
|
||
|
|
"description": "Registry key value type",
|
||
|
|
"disable_correlation": true,
|
||
|
|
"misp-attribute": "text",
|
||
|
|
"sane_default": [
|
||
|
|
"REG_NONE",
|
||
|
|
"REG_SZ",
|
||
|
|
"REG_EXPAND_SZ",
|
||
|
|
"REG_BINARY",
|
||
|
|
"REG_DWORD",
|
||
|
|
"REG_DWORD_LITTLE_ENDIAN",
|
||
|
|
"REG_DWORD_BIG_ENDIAN",
|
||
|
|
"REG_LINK",
|
||
|
|
"REG_MULTI_SZ",
|
||
|
|
"REG_RESOURCE_LIST",
|
||
|
|
"REG_FULL_RESOURCE_DESCRIPTOR",
|
||
|
|
"REG_RESOURCE_REQUIREMENTS_LIST",
|
||
|
|
"REG_QWORD",
|
||
|
|
"REG_QWORD_LITTLE_ENDIAN"
|
||
|
|
],
|
||
|
|
"ui-priority": 0
|
||
|
|
},
|
||
|
|
"name": {
|
||
|
|
"categories": [
|
||
|
|
"Persistence mechanism"
|
||
|
|
],
|
||
|
|
"description": "Name of the registry key value",
|
||
|
|
"misp-attribute": "text",
|
||
|
|
"ui-priority": 1
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"description": "Registry key value object describing a Windows registry key value, with its data, data type and name values. To be used when a registry key has multiple values.",
|
||
|
|
"meta-category": "file",
|
||
|
|
"name": "registry-key-value",
|
||
|
|
"requiredOneOf": [
|
||
|
|
"data"
|
||
|
|
],
|
||
|
|
"uuid": "4626a273-72c1-48d3-8595-ff48ea2277f7",
|
||
|
|
"version": 1
|
||
|
|
}
|