MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

registry key object added

pull/1/head
Michael Kerscher 2016-12-07 16:39:31 +01:00
parent 1d97cbbd2d
commit 30512f69af
1 changed files with 40 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

40
objects/registry-key/definition.json Normal file
View File

@ -0,0 +1,40 @@
{
"name": "registry-key",
"meta-category": "file",
"description": "Registry key object describing a Windows registry key with value and last-modified timestamp",
"version": 1,
"attributes" :
{
"hive": {
"misp-attribute": "reg-hive",
"misp-usage-frequency": 1,
"categories": ["Persistence mechanism"]
},
"key": {
"misp-attribute": "reg-key",
"misp-usage-frequency": 1,
"categories": ["Persistence mechanism"]
},
"name": {
"misp-attribute": "reg-name",
"misp-usage-frequency": 1,
"categories": ["Persistence mechanism"]
},
"data": {
"misp-attribute": "reg-data",
"misp-usage-frequency": 1,
"categories": ["Persistence mechanism"]
},
"data-type": {
"misp-attribute": "reg-datatype",
"misp-usage-frequency": 0,
"categories": ["Persistence mechanism"]
},
"last-modified": {
"misp-attribute": "datetime",
"misp-usage-frequency": 0,
"categories": ["Other"]
}
},
"required": ["key", "name"]
}