misp-objects/objects/registry-key/definition.json

{
  "required": [
    "key",
    "name"
  ],
  "attributes": {
    "last-modified": {
      "categories": [
        "Other"
      ],
      "ui-priority": 0,
      "misp-attribute": "datetime"
    },
    "data-type": {
      "categories": [
        "Persistence mechanism"
      ],
      "ui-priority": 0,
      "misp-attribute": "reg-datatype"
    },
    "data": {
      "categories": [
        "Persistence mechanism"
      ],
      "ui-priority": 1,
      "misp-attribute": "reg-data"
    },
    "name": {
      "categories": [
        "Persistence mechanism"
      ],
      "ui-priority": 1,
      "misp-attribute": "reg-name"
    },
    "key": {
      "categories": [
        "Persistence mechanism"
      ],
      "ui-priority": 1,
      "misp-attribute": "reg-key"
    },
    "hive": {
      "categories": [
        "Persistence mechanism"
      ],
      "ui-priority": 1,
      "misp-attribute": "reg-hive"
    }
  },
  "version": 1,
  "description": "Registry key object describing a Windows registry key with value and last-modified timestamp",
  "meta-category": "file",
  "uuid": "8b3228ad-6d82-4fe6-b2ae-05426308f1d5",
  "name": "registry-key"
}