MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

misp-usage-frequency updated

pull/17/head
Alexandre Dulaunoy 2017-07-03 12:11:54 +02:00
parent a8b1a0a512
commit 5f0755859e
1 changed files with 54 additions and 54 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

108
objects/elf-section/definition.json
View File

@ -1,18 +1,26 @@
{ {
"name": "elf-section", "requiredOneOf": [
"uuid": "ca271f32-1234-4e87-b240-6b6e882de5de", "text",
"meta-category": "file", "name",
"description": "Object describing a section of an Executable and Linkable Format", "sha1",
"version": 1, "sha256",
"sha512"
],
"attributes": { "attributes": {
"sh_name": { "sha512": {
"misp-attribute": "text", "ui-frequency": 0,
"misp-usage-frequency": 1, "misp-attribute": "sha512"
"disable_correlation": true },
"ssdeep": {
"ui-frequency": 0,
"misp-attribute": "ssdeep"
},
"entropy": {
"disable_correlation": true,
"ui-frequency": 0,
"misp-attribute": "float"
}, },
"sh_type": { "sh_type": {
"misp-attribute": "text",
"misp-usage-frequency": 0,
"sane_default": [ "sane_default": [
"SHT_NULL", "SHT_NULL",
"SHT_PROGBITS", "SHT_PROGBITS",
@ -33,11 +41,30 @@
"SHT_SYMTAB_SHNDX", "SHT_SYMTAB_SHNDX",
"SHT_NUM", "SHT_NUM",
"SHT_LOOS" "SHT_LOOS"
] ],
"ui-frequency": 0,
"misp-attribute": "text"
},
"sh_name": {
"disable_correlation": true,
"ui-frequency": 1,
"misp-attribute": "text"
},
"sha256": {
"ui-frequency": 0,
"misp-attribute": "sha256"
},
"sh_size": {
"disable_correlation": true,
"ui-frequency": 1,
"misp-attribute": "size-in-bytes"
},
"text": {
"disable_correlation": true,
"ui-frequency": 1,
"misp-attribute": "text"
}, },
"sh_flags": { "sh_flags": {
"misp-attribute": "text",
"misp-usage-frequency": 0,
"sane_default": [ "sane_default": [
"W (write)", "W (write)",
"A (alloc)", "A (alloc)",
@ -55,49 +82,22 @@
"E (exclude)", "E (exclude)",
"l (large)", "l (large)",
"p (processor specific)" "p (processor specific)"
] ],
}, "ui-frequency": 0,
"text": { "misp-attribute": "text"
"misp-attribute": "text",
"misp-usage-frequency": 1,
"disable_correlation": true
},
"sh_size": {
"misp-attribute": "size-in-bytes",
"misp-usage-frequency": 1,
"disable_correlation": true
},
"entropy": {
"misp-attribute": "float",
"misp-usage-frequency": 0,
"disable_correlation": true
},
"md5": {
"misp-attribute": "md5",
"misp-usage-frequency": 1
}, },
"sha1": { "sha1": {
"misp-attribute": "sha1", "ui-frequency": 0,
"misp-usage-frequency": 0 "misp-attribute": "sha1"
}, },
"sha256": { "md5": {
"misp-attribute": "sha256", "ui-frequency": 1,
"misp-usage-frequency": 0 "misp-attribute": "md5"
},
"sha512": {
"misp-attribute": "sha512",
"misp-usage-frequency": 0
},
"ssdeep": {
"misp-attribute": "ssdeep",
"misp-usage-frequency": 0
} }
}, },
"requiredOneOf": [ "version": 1,
"text", "description": "Object describing a section of an Executable and Linkable Format",
"name", "meta-category": "file",
"sha1", "uuid": "ca271f32-1234-4e87-b240-6b6e882de5de",
"sha256", "name": "elf-section"
"sha512"
]
} }