MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [forensic-evidence] updated to include other tools and correlation disabled for some fields

pull/241/head
Alexandre Dulaunoy 2018-09-04 20:48:51 +02:00
parent 3a81765d8f
commit 38071f4bd9
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 13 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
objects/forensic-evidence/definition.json
View File

@ -27,10 +27,11 @@
"Cloud", "Cloud",
"IoT", "IoT",
"Other" "Other"
] ],
"disable_correlation": true
}, },
"name": { "name": {
"description": "Name", "description": "Name of the evidence acquired.",
"ui-priority": 0, "ui-priority": 0,
"misp-attribute": "text" "misp-attribute": "text"
}, },
@ -46,7 +47,8 @@
"File system extraction", "File system extraction",
"Chip-off", "Chip-off",
"Other" "Other"
] ],
"disable_correlation": true
}, },
"acquisition-tools": { "acquisition-tools": {
"description": "Tools used for acquisition of the evidence.", "description": "Tools used for acquisition of the evidence.",
@ -54,7 +56,9 @@
"misp-attribute": "text", "misp-attribute": "text",
"multiple": true, "multiple": true,
"sane_default": [ "sane_default": [
"DCFldd", "dd",
"dc3dd",
"dcfldd",
"EnCase", "EnCase",
"FTK Imager", "FTK Imager",
"FDAS", "FDAS",
@ -62,7 +66,8 @@
"Guymager", "Guymager",
"IXimager", "IXimager",
"Other" "Other"
] ],
"disable_correlation": true
}, },
"references": { "references": {
"description": "External references", "description": "External references",
@ -73,10 +78,11 @@
"additional-comments": { "additional-comments": {
"description": "Comments.", "description": "Comments.",
"ui-priority": 0, "ui-priority": 0,
"misp-attribute": "text" "misp-attribute": "text",
"disable_correlation": true
} }
}, },
"version": 1, "version": 2,
"description": "An object template to describe a digital forensic evidence.", "description": "An object template to describe a digital forensic evidence.",
"meta-category": "misc", "meta-category": "misc",
"uuid": "fe44c648-63ef-43fc-b3de-af71a2e023e4", "uuid": "fe44c648-63ef-43fc-b3de-af71a2e023e4",