From 3a81765d8fdcb8e10a67fd407b09ca33fe7f868d Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Tue, 4 Sep 2018 20:40:16 +0200 Subject: [PATCH] jq all the things (tm) --- objects/forensic-evidence/definition.json | 146 +++++++++++----------- 1 file changed, 73 insertions(+), 73 deletions(-) diff --git a/objects/forensic-evidence/definition.json b/objects/forensic-evidence/definition.json index 068a15e..b0effd8 100644 --- a/objects/forensic-evidence/definition.json +++ b/objects/forensic-evidence/definition.json @@ -1,80 +1,80 @@ { "required": [ - "case-number", - "evidence-number" + "case-number", + "evidence-number" ], "attributes": { - "case-number": { - "description": "A unique number assigned to the case for unique identification.", - "ui-priority": 0, - "misp-attribute": "text" - }, - "evidence-number": { - "description": "A unique number assigned to the evidence for unique identification.", - "ui-priority": 0, - "misp-attribute": "text" - }, - "type": { - "description": "Evidence type.", - "multiple": true, - "ui-priority": 0, - "misp-attribute": "text", - "sane_default": [ - "Computer", - "Network", - "Mobile Device", - "Multimedia", - "Cloud", - "IoT", - "Other" - ] - }, - "name": { - "description": "Name", - "ui-priority": 0, - "misp-attribute": "text" - }, - "acquisition-method": { - "description": "Method used for acquisition of the evidence.", - "ui-priority": 0, - "misp-attribute": "text", - "sane_default": [ - "Live acquisition", - "Dead/Offline acquisition", - "Physical collection", - "Logical collection", - "File system extraction", - "Chip-off", - "Other" - ] - }, - "acquisition-tools": { - "description": "Tools used for acquisition of the evidence.", - "ui-priority": 0, - "misp-attribute": "text", - "multiple" : true, - "sane_default": [ - "DCFldd", - "EnCase", - "FTK Imager", - "FDAS", - "TrueBack", - "Guymager", - "IXimager", - "Other" - ] - }, - "references": { - "description": "External references", - "multiple": true, - "ui-priority": 0, - "misp-attribute": "link" - }, - "additional-comments": { - "description": "Comments.", - "ui-priority": 0, - "misp-attribute": "text" - } + "case-number": { + "description": "A unique number assigned to the case for unique identification.", + "ui-priority": 0, + "misp-attribute": "text" + }, + "evidence-number": { + "description": "A unique number assigned to the evidence for unique identification.", + "ui-priority": 0, + "misp-attribute": "text" + }, + "type": { + "description": "Evidence type.", + "multiple": true, + "ui-priority": 0, + "misp-attribute": "text", + "sane_default": [ + "Computer", + "Network", + "Mobile Device", + "Multimedia", + "Cloud", + "IoT", + "Other" + ] + }, + "name": { + "description": "Name", + "ui-priority": 0, + "misp-attribute": "text" + }, + "acquisition-method": { + "description": "Method used for acquisition of the evidence.", + "ui-priority": 0, + "misp-attribute": "text", + "sane_default": [ + "Live acquisition", + "Dead/Offline acquisition", + "Physical collection", + "Logical collection", + "File system extraction", + "Chip-off", + "Other" + ] + }, + "acquisition-tools": { + "description": "Tools used for acquisition of the evidence.", + "ui-priority": 0, + "misp-attribute": "text", + "multiple": true, + "sane_default": [ + "DCFldd", + "EnCase", + "FTK Imager", + "FDAS", + "TrueBack", + "Guymager", + "IXimager", + "Other" + ] + }, + "references": { + "description": "External references", + "multiple": true, + "ui-priority": 0, + "misp-attribute": "link" + }, + "additional-comments": { + "description": "Comments.", + "ui-priority": 0, + "misp-attribute": "text" + } }, "version": 1, "description": "An object template to describe a digital forensic evidence.",