MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

Update PE object

pull/10/head
Raphaël Vinot 2017-03-14 15:57:05 +01:00
parent c57e6a568d
commit 15488f0633
1 changed files with 15 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
objects/pe/definition.json
View File

@ -12,14 +12,26 @@
"misp-attribute": "pehash", "misp-attribute": "pehash",
"misp-usage-frequency": 0 "misp-usage-frequency": 0
}, },
"type": {
"misp-attribute": "text",
"misp-usage-frequency": 1,
"disable_correlation": true,
"sane_default": [
"exe",
"dll",
"driver",
"unknown"
]
},
"text": { "text": {
"misp-attribute": "text", "misp-attribute": "text",
"misp-usage-frequency": 1, "misp-usage-frequency": 1,
"disable_correlation": true "disable_correlation": true
}, },
"number of sections": { "number-sections": {
"misp-attribute": "text", "misp-attribute": "counter",
"misp-usage-frequency": 0 "misp-usage-frequency": 0,
"disable_correlation": true
}, },
"original-filename": { "original-filename": {
"misp-attribute": "filename", "misp-attribute": "filename",