From 5cd069acdda441aea62ba190d1b730b54c9ba766 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Sun, 24 Dec 2017 15:05:12 +0100
Subject: [PATCH] fix: disable correlation on all filename-*

---
 objects/pe/definition.json | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/objects/pe/definition.json b/objects/pe/definition.json
index e53d7ea..86f37b5 100644
--- a/objects/pe/definition.json
+++ b/objects/pe/definition.json
@@ -19,12 +19,14 @@
     "internal-filename": {
       "description": "InternalFilename in the resources",
       "ui-priority": 0,
-      "misp-attribute": "filename"
+      "misp-attribute": "filename",
+      "disable_correlation": true
     },
     "original-filename": {
       "description": "OriginalFilename in the resources",
       "ui-priority": 1,
-      "misp-attribute": "filename"
+      "misp-attribute": "filename",
+      "disable_correlation": true
     },
     "number-sections": {
       "description": "Number of sections",
@@ -116,7 +118,7 @@
       "misp-attribute": "text"
     }
   },
-  "version": 2,
+  "version": 3,
   "description": "Object describing a Portable Executable",
   "meta-category": "file",
   "uuid": "cf7adecc-d4f0-4e88-9d90-f978ee151a07",