From 7ebda41b4afd16110985eb277c2e678bccad9cf7 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Sat, 30 Dec 2017 19:39:55 +0100
Subject: [PATCH] fix: disable correlation on fields where is not needed

---
 objects/elf/definition.json | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/objects/elf/definition.json b/objects/elf/definition.json
index 3fc090a..7fe59c3 100644
--- a/objects/elf/definition.json
+++ b/objects/elf/definition.json
@@ -210,7 +210,8 @@
         "AMDGPU"
       ],
       "ui-priority": 0,
-      "misp-attribute": "text"
+      "misp-attribute": "text",
+      "disable_correlation": true
     },
     "os_abi": {
       "description": "Header operating system application binary interface (ABI)",
@@ -238,7 +239,8 @@
         "TRU64"
       ],
       "ui-priority": 0,
-      "misp-attribute": "text"
+      "misp-attribute": "text",
+      "disable_correlation": true
     },
     "text": {
       "description": "Free text value to attach to the ELF",
@@ -248,7 +250,7 @@
       "recommended": false
     }
   },
-  "version": 3,
+  "version": 4,
   "description": "Object describing a Executable and Linkable Format",
   "meta-category": "file",
   "uuid": "fa6534ae-ad74-4ce0-8f23-15a66c82c7fa",