From 15488f0633143e4eaddd85a50730398388dab35b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Rapha=C3=ABl=20Vinot?= Date: Tue, 14 Mar 2017 15:57:05 +0100 Subject: [PATCH] Update PE object --- objects/pe/definition.json | 18 +++++++++++++++--- 1 file changed, 15 insertions(+), 3 deletions(-) diff --git a/objects/pe/definition.json b/objects/pe/definition.json index 594693b..24497db 100644 --- a/objects/pe/definition.json +++ b/objects/pe/definition.json @@ -12,14 +12,26 @@ "misp-attribute": "pehash", "misp-usage-frequency": 0 }, + "type": { + "misp-attribute": "text", + "misp-usage-frequency": 1, + "disable_correlation": true, + "sane_default": [ + "exe", + "dll", + "driver", + "unknown" + ] + }, "text": { "misp-attribute": "text", "misp-usage-frequency": 1, "disable_correlation": true }, - "number of sections": { - "misp-attribute": "text", - "misp-usage-frequency": 0 + "number-sections": { + "misp-attribute": "counter", + "misp-usage-frequency": 0, + "disable_correlation": true }, "original-filename": { "misp-attribute": "filename",