diff --git a/objects/elf-section/definition.json b/objects/elf-section/definition.json index 6c7ed82..53662dd 100644 --- a/objects/elf-section/definition.json +++ b/objects/elf-section/definition.json @@ -1,18 +1,26 @@ { - "name": "elf-section", - "uuid": "ca271f32-1234-4e87-b240-6b6e882de5de", - "meta-category": "file", - "description": "Object describing a section of an Executable and Linkable Format", - "version": 1, + "requiredOneOf": [ + "text", + "name", + "sha1", + "sha256", + "sha512" + ], "attributes": { - "sh_name": { - "misp-attribute": "text", - "misp-usage-frequency": 1, - "disable_correlation": true + "sha512": { + "ui-frequency": 0, + "misp-attribute": "sha512" + }, + "ssdeep": { + "ui-frequency": 0, + "misp-attribute": "ssdeep" + }, + "entropy": { + "disable_correlation": true, + "ui-frequency": 0, + "misp-attribute": "float" }, "sh_type": { - "misp-attribute": "text", - "misp-usage-frequency": 0, "sane_default": [ "SHT_NULL", "SHT_PROGBITS", @@ -33,11 +41,30 @@ "SHT_SYMTAB_SHNDX", "SHT_NUM", "SHT_LOOS" - ] + ], + "ui-frequency": 0, + "misp-attribute": "text" + }, + "sh_name": { + "disable_correlation": true, + "ui-frequency": 1, + "misp-attribute": "text" + }, + "sha256": { + "ui-frequency": 0, + "misp-attribute": "sha256" + }, + "sh_size": { + "disable_correlation": true, + "ui-frequency": 1, + "misp-attribute": "size-in-bytes" + }, + "text": { + "disable_correlation": true, + "ui-frequency": 1, + "misp-attribute": "text" }, "sh_flags": { - "misp-attribute": "text", - "misp-usage-frequency": 0, "sane_default": [ "W (write)", "A (alloc)", @@ -55,49 +82,22 @@ "E (exclude)", "l (large)", "p (processor specific)" - ] - }, - "text": { - "misp-attribute": "text", - "misp-usage-frequency": 1, - "disable_correlation": true - }, - "sh_size": { - "misp-attribute": "size-in-bytes", - "misp-usage-frequency": 1, - "disable_correlation": true - }, - "entropy": { - "misp-attribute": "float", - "misp-usage-frequency": 0, - "disable_correlation": true - }, - "md5": { - "misp-attribute": "md5", - "misp-usage-frequency": 1 + ], + "ui-frequency": 0, + "misp-attribute": "text" }, "sha1": { - "misp-attribute": "sha1", - "misp-usage-frequency": 0 + "ui-frequency": 0, + "misp-attribute": "sha1" }, - "sha256": { - "misp-attribute": "sha256", - "misp-usage-frequency": 0 - }, - "sha512": { - "misp-attribute": "sha512", - "misp-usage-frequency": 0 - }, - "ssdeep": { - "misp-attribute": "ssdeep", - "misp-usage-frequency": 0 + "md5": { + "ui-frequency": 1, + "misp-attribute": "md5" } }, - "requiredOneOf": [ - "text", - "name", - "sha1", - "sha256", - "sha512" - ] + "version": 1, + "description": "Object describing a section of an Executable and Linkable Format", + "meta-category": "file", + "uuid": "ca271f32-1234-4e87-b240-6b6e882de5de", + "name": "elf-section" }