MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

add attributes

pull/9/head
Sébastien Larinier 2017-03-13 17:58:56 +01:00
parent 684d4d0631
commit 681d18f4eb
2 changed files with 53 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
objects/elf-section/definition.json
View File

@ -4,12 +4,12 @@
"description": "Object describing a section of an Executable and Linkable Format", "description": "Object describing a section of an Executable and Linkable Format",
"version": 1, "version": 1,
"attributes": { "attributes": {
"name": { "sh_name": {
"misp-attribute": "text", "misp-attribute": "text",
"misp-usage-frequency": 1, "misp-usage-frequency": 1,
"disable_correlation": true "disable_correlation": true
}, },
"Flags": { "sh_flags": {
"misp-attribute": "text", "misp-attribute": "text",
"misp-usage-frequency": 0, "misp-usage-frequency": 0,
"sane_default": [ "sane_default": [
@ -36,7 +36,7 @@
"misp-usage-frequency": 1, "misp-usage-frequency": 1,
"disable_correlation": true "disable_correlation": true
}, },
"size-in-bytes": { "sh_size": {
"misp-attribute": "size-in-bytes", "misp-attribute": "size-in-bytes",
"misp-usage-frequency": 1, "misp-usage-frequency": 1,
"disable_correlation": true "disable_correlation": true

56
objects/elf/definition.json
View File

@ -13,7 +13,7 @@
"misp-attribute": "filename", "misp-attribute": "filename",
"misp-usage-frequency": 1 "misp-usage-frequency": 1
}, },
"entrypoint-address": { "e_entry": {
"misp-attribute": "text", "misp-attribute": "text",
"misp-usage-frequency": 0, "misp-usage-frequency": 0,
"disable_correlation": true "disable_correlation": true
@ -23,17 +23,61 @@
"misp-usage-frequency": 0, "misp-usage-frequency": 0,
"disable_correlation": true "disable_correlation": true
}, },
"file-version": { "e_version": {
"misp-attribute": "text", "misp-attribute": "text",
"misp-usage-frequency": 0, "misp-usage-frequency": 0,
"disable_correlation": true "disable_correlation": true
}, },
"elf-type": { "e_type":{
"misp-attribute": "text", "misp-attribute": "text",
"misp-usage-frequency": 0, "misp-usage-frequency": 0,
"disable_correlation": true "sane_default":[
} "relocatable",
"executable",
"shared",
"core"
]
},
"e_ident_abi":{
"misp-attribute": "text",
"misp-usage-frequency": 0,
"sane_default":[
"System V",
"HP_UX",
"NetBSD",
"Linux",
"Solaris",
"AIX",
"IRIX",
"FreeBSD",
"True64",
"Novell Modesto",
"OpenBSD",
"OpenVMS",
"NonStop Kernel",
"AROS",
"Fenis OS",
"CloudABI",
"Sortix"
]},
"e_machine":{
"misp-attribute": "text",
"misp-usage-frequency": 0,
"sane_default":[
"No specific instruction set",
"SPARC",
"X86",
"MISP",
"PowerPC",
"ARM",
"SuperH",
"IA-64",
"x86-64",
"AArch64",
"RISC-V"
]}
}, },
"requiredOneOf": [ "requiredOneOf": [
"text", "text",
"original-filename", "original-filename",