From 01a23c205cf2a27a2351ae3fcc0f3735a8b436b1 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Sun, 13 Aug 2017 10:41:10 +0200
Subject: [PATCH] Often used relationships added used for malware analysis

---
 relationships/definition.json | 18 ++++++++++++++++--
 1 file changed, 16 insertions(+), 2 deletions(-)

diff --git a/relationships/definition.json b/relationships/definition.json
index 6bca513..c821485 100644
--- a/relationships/definition.json
+++ b/relationships/definition.json
@@ -1,5 +1,5 @@
 {
-  "version": 3,
+  "version": 4,
   "values": [
     {
       "name": "derived-from",
@@ -118,7 +118,21 @@
     },
     {
       "name": "communicates-with",
-      "description": "This relationship describes an object communicating with another object",
+      "description": "This relationship describes an object communicating with another object.",
+      "format": [
+        "misp"
+      ]
+    },
+    {
+      "name": "dropped-by",
+      "description": "This relationship describes an object dropped by another object.",
+      "format": [
+        "misp"
+      ]
+    },
+    {
+      "name": "executed-by",
+      "description": "This relationship describes an objected executed by another object.",
       "format": [
         "misp"
       ]