misp-usage-frequency updated

pull/17/head
Alexandre Dulaunoy 2017-07-03 12:17:46 +02:00
parent dc2b6524c1
commit 405a5451cc
1 changed files with 73 additions and 73 deletions

View File

@ -1,109 +1,109 @@
{ {
"name": "pe", "requiredOneOf": [
"uuid": "cf7adecc-d4f0-4e88-9d90-f978ee151a07", "text",
"meta-category": "file", "original-filename",
"description": "Object describing a Portable Executable", "internal-filename"
"version": 1, ],
"attributes": { "attributes": {
"imphash": {
"misp-attribute": "imphash",
"misp-usage-frequency": 0
},
"pehash": { "pehash": {
"misp-attribute": "pehash", "ui-frequency": 0,
"misp-usage-frequency": 0 "misp-attribute": "pehash"
}, },
"impfuzzy": { "impfuzzy": {
"misp-attribute": "impfuzzy", "ui-frequency": 0,
"misp-usage-frequency": 0 "misp-attribute": "impfuzzy"
},
"pe-type": {
"disable_correlation": true,
"ui-frequency": 0,
"misp-attribute": "text"
},
"internal-filename": {
"ui-frequency": 0,
"misp-attribute": "filename"
},
"original-filename": {
"ui-frequency": 1,
"misp-attribute": "filename"
},
"number-sections": {
"disable_correlation": true,
"ui-frequency": 0,
"misp-attribute": "counter"
},
"text": {
"disable_correlation": true,
"ui-frequency": 1,
"misp-attribute": "text"
}, },
"type": { "type": {
"misp-attribute": "text",
"misp-usage-frequency": 1,
"disable_correlation": true,
"sane_default": [ "sane_default": [
"exe", "exe",
"dll", "dll",
"driver", "driver",
"unknown" "unknown"
] ],
"disable_correlation": true,
"ui-frequency": 1,
"misp-attribute": "text"
}, },
"text": { "imphash": {
"misp-attribute": "text", "ui-frequency": 0,
"misp-usage-frequency": 1, "misp-attribute": "imphash"
"disable_correlation": true
},
"number-sections": {
"misp-attribute": "counter",
"misp-usage-frequency": 0,
"disable_correlation": true
},
"original-filename": {
"misp-attribute": "filename",
"misp-usage-frequency": 1
},
"internal-filename": {
"misp-attribute": "filename",
"misp-usage-frequency": 0
}, },
"compilation-timestamp": { "compilation-timestamp": {
"misp-attribute": "datetime", "ui-frequency": 1,
"misp-usage-frequency": 1 "misp-attribute": "datetime"
}, },
"entrypoint-section|position": { "entrypoint-section|position": {
"misp-attribute": "text", "disable_correlation": true,
"misp-usage-frequency": 0, "ui-frequency": 0,
"disable_correlation": true "misp-attribute": "text"
}, },
"entrypoint-address": { "entrypoint-address": {
"misp-attribute": "text", "disable_correlation": true,
"misp-usage-frequency": 0, "ui-frequency": 0,
"disable_correlation": true "misp-attribute": "text"
}, },
"file-description": { "file-description": {
"misp-attribute": "text", "disable_correlation": true,
"misp-usage-frequency": 0, "ui-frequency": 0,
"disable_correlation": true "misp-attribute": "text"
}, },
"file-version": { "file-version": {
"misp-attribute": "text", "disable_correlation": true,
"misp-usage-frequency": 0, "ui-frequency": 0,
"disable_correlation": true "misp-attribute": "text"
}, },
"lang-id": { "lang-id": {
"misp-attribute": "text", "disable_correlation": true,
"misp-usage-frequency": 0, "ui-frequency": 0,
"disable_correlation": true "misp-attribute": "text"
}, },
"product-name": { "product-name": {
"misp-attribute": "text", "disable_correlation": true,
"misp-usage-frequency": 0, "ui-frequency": 0,
"disable_correlation": true "misp-attribute": "text"
}, },
"product-version": { "product-version": {
"misp-attribute": "text", "disable_correlation": true,
"misp-usage-frequency": 0, "ui-frequency": 0,
"disable_correlation": true "misp-attribute": "text"
}, },
"company-name": { "company-name": {
"misp-attribute": "text", "disable_correlation": true,
"misp-usage-frequency": 0, "ui-frequency": 0,
"disable_correlation": true "misp-attribute": "text"
}, },
"legal-copyright": { "legal-copyright": {
"misp-attribute": "text", "disable_correlation": true,
"misp-usage-frequency": 0, "ui-frequency": 0,
"disable_correlation": true "misp-attribute": "text"
},
"pe-type": {
"misp-attribute": "text",
"misp-usage-frequency": 0,
"disable_correlation": true
} }
}, },
"requiredOneOf": [ "version": 1,
"text", "description": "Object describing a Portable Executable",
"original-filename", "meta-category": "file",
"internal-filename" "uuid": "cf7adecc-d4f0-4e88-9d90-f978ee151a07",
] "name": "pe"
} }