chg: [registry-key] added Artifacts dropped as potential category

pull/430/head
Christophe Vandeplas 2024-04-25 11:18:26 +02:00 committed by GitHub
parent 3a2c160630
commit 28328aa53d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 12 additions and 7 deletions

View File

@ -2,7 +2,8 @@
"attributes": { "attributes": {
"data": { "data": {
"categories": [ "categories": [
"Persistence mechanism" "Persistence mechanism",
"Artifacts dropped"
], ],
"description": "Data stored in the registry key", "description": "Data stored in the registry key",
"misp-attribute": "text", "misp-attribute": "text",
@ -10,7 +11,8 @@
}, },
"data-type": { "data-type": {
"categories": [ "categories": [
"Persistence mechanism" "Persistence mechanism",
"Artifacts dropped"
], ],
"description": "Registry value type", "description": "Registry value type",
"disable_correlation": true, "disable_correlation": true,
@ -35,7 +37,8 @@
}, },
"hive": { "hive": {
"categories": [ "categories": [
"Persistence mechanism" "Persistence mechanism",
"Artifacts dropped"
], ],
"description": "Hive used to store the registry key (file on disk)", "description": "Hive used to store the registry key (file on disk)",
"disable_correlation": true, "disable_correlation": true,
@ -44,7 +47,8 @@
}, },
"key": { "key": {
"categories": [ "categories": [
"Persistence mechanism" "Persistence mechanism",
"Artifacts dropped"
], ],
"description": "Full key path", "description": "Full key path",
"misp-attribute": "regkey", "misp-attribute": "regkey",
@ -60,7 +64,8 @@
}, },
"name": { "name": {
"categories": [ "categories": [
"Persistence mechanism" "Persistence mechanism",
"Artifacts dropped"
], ],
"description": "Name of the registry key", "description": "Name of the registry key",
"misp-attribute": "text", "misp-attribute": "text",
@ -98,5 +103,5 @@
"data" "data"
], ],
"uuid": "8b3228ad-6d82-4fe6-b2ae-05426308f1d5", "uuid": "8b3228ad-6d82-4fe6-b2ae-05426308f1d5",
"version": 4 "version": 5
} }