From bdad48d587be1f6a0fdad25db5444190e558518b Mon Sep 17 00:00:00 2001 From: Deborah Servili Date: Fri, 8 Nov 2019 15:35:14 +0100 Subject: [PATCH 1/2] switch requiredOneOf list to required since it contains only one element --- objects/shell-commands/definition.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/objects/shell-commands/definition.json b/objects/shell-commands/definition.json index 8600073..895eb24 100644 --- a/objects/shell-commands/definition.json +++ b/objects/shell-commands/definition.json @@ -1,5 +1,5 @@ { - "requiredOneOf": [ + "required": [ "shell-command" ], "attributes": { @@ -54,7 +54,7 @@ ] } }, - "version": 1, + "version": 2, "description": "Object describing a series of shell commands executed. This object can be linked with malicious files in order to describe a specific execution of shell commands.", "meta-category": "misc", "uuid": "fee65efa-eb64-4516-8611-1db76c589f79", From c0877cfd7cb33e270e530e0204069b36e51a9519 Mon Sep 17 00:00:00 2001 From: Deborah Servili Date: Tue, 10 Dec 2019 12:19:29 +0100 Subject: [PATCH 2/2] add imphash in file object --- objects/file/definition.json | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/objects/file/definition.json b/objects/file/definition.json index 944834c..fe2ee99 100644 --- a/objects/file/definition.json +++ b/objects/file/definition.json @@ -440,9 +440,14 @@ "Windows-31J", "windows-874" ] + }, + "imphash": { + "description": "Hash (md5) calculated from the import table", + "ui-priority": 0, + "misp-attribute": "imphash" } }, - "version": 17, + "version": 18, "description": "File object describing a file with meta-information", "meta-category": "file", "uuid": "688c46fb-5edb-40a3-8273-1af7923e2215",