misp-objects/objects/regripper-system-hive-general-configuration/definition.json

{
  "required": [
    "computer-name"
  ],
  "attributes": {
    "computer-name": {
      "description": "name of the computer under analysis",
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "last-write-time": {
      "description": "Date and time when the key was last updated.",
      "ui-priority": 0,
      "misp-attribute": "datetime",
      "disable_correlation": true
    },
    "shutdown-time": {
      "description": "Date and time when the system was shutdown.",
      "ui-priority": 0,
      "misp-attribute": "datetime",
      "disable_correlation": true
    },
    "timezone-last-write-time": {
      "description": "Date and time when the timezone key was last updated.",
      "ui-priority": 0,
      "misp-attribute": "datetime",
      "disable_correlation": true
    },
    "timezone-bias": {
      "description": "Offset in minutes from UTC. Offset added to the local time to get a UTC value.",
      "ui-priority": 0,
      "misp-attribute": "text",
      "disable_correlation": true
    },
    "timezone-standard-name": {
      "description": "Timezone standard name used during non-daylight saving months.",
      "ui-priority": 0,
      "misp-attribute": "text",
      "disable_correlation": true
    },
    "timezone-standard-date": {
      "description": "Standard date - non daylight saving months",
      "ui-priority": 0,
      "misp-attribute": "datetime",
      "disable_correlation": true
    },
    "timezone-standard-bias": {
      "description": "value in minutes to be added to the value of timezone-bias to generate the bias used during standard time.",
      "ui-priority": 0,
      "misp-attribute": "text",
      "disable_correlation": true
    },
    "timezone-daylight-name": {
      "description": "Timezone name used during daylight saving months.",
      "ui-priority": 0,
      "misp-attribute": "text",
      "disable_correlation": true
    },
    "timezone-daylight-date": {
      "description": "Daylight date - daylight saving months",
      "ui-priority": 0,
      "misp-attribute": "datetime",
      "disable_correlation": true
    },
    "timezone-daylight-bias": {
      "description": "value in minutes to be added to the value of timezone-bias to generate the bias used during daylight time.",
      "ui-priority": 0,
      "misp-attribute": "text",
      "disable_correlation": true
    },
    "fDenyTSConnections:": {
      "description": "Specifies whether remote connections are enabled or disabled on the system.",
      "ui-priority": 0,
      "misp-attribute": "boolean",
      "disable_correlation": true
    },
    "comment": {
      "description": "Additional comments.",
      "ui-priority": 0,
      "misp-attribute": "",
      "disable_correlation": true
    }
  },
  "version": 1,
  "description": "Regripper Object template designed to present general system properties extracted from the system-hive.",
  "meta-category": "misc",
  "uuid": "5ac85401-cbf1-4d05-a85e-1784546881e4",
  "name": "regripper-system-hive-general-configuration"
}