From 415adea9a7efe1a55ef56e7f15b3d10222905205 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Tue, 9 Feb 2016 21:23:48 +0100
Subject: [PATCH] pattern-in-file added

---
 objects/file/definition.json | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/objects/file/definition.json b/objects/file/definition.json
index 4f650a9..2ff4318 100644
--- a/objects/file/definition.json
+++ b/objects/file/definition.json
@@ -65,8 +65,13 @@
                 "sha256": {
                         "misp-attribute": "sha256",
                         "misp-usage-frequency": 1
-                } 
+                },
+                "pattern-in-file": {
+                        "misp-attribute": "pattern-in-file",
+                        "misp-usage-frequency": 1,
+                        "categories": ["Artifacts dropped","Payload installation","External analysis"]
+                }
 
         },
-        "requiredOneOf": ["filename", "size-in-bytes", "authentihash", "ssdeep", "imphash", "pehash", "sha-224", "sha-384", "sha-512", "sha-512/224", "sha-512/256", "tlsh", "md5", "sha1", "sha256"]
+        "requiredOneOf": ["filename", "size-in-bytes", "authentihash", "ssdeep", "imphash", "pehash", "sha-224", "sha-384", "sha-512", "sha-512/224", "sha-512/256", "tlsh", "md5", "sha1", "sha256", "pattern-in-file"]
 }