From 86f8ad974ad22c29ad802e1bac7bc3736c6a419a Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Mon, 3 Jul 2017 12:18:25 +0200
Subject: [PATCH] misp-usage-frequency updated

---
 objects/pe-section/definition.json | 92 +++++++++++++++---------------
 1 file changed, 46 insertions(+), 46 deletions(-)

diff --git a/objects/pe-section/definition.json b/objects/pe-section/definition.json
index 85fc90a..b653ac6 100644
--- a/objects/pe-section/definition.json
+++ b/objects/pe-section/definition.json
@@ -1,13 +1,23 @@
 {
-  "name": "pe-section",
-  "uuid": "198a17d2-a135-4b25-9a32-5aa4e632014a",
-  "meta-category": "file",
-  "description": "Object describing a section of a Portable Executable",
-  "version": 1,
+  "requiredOneOf": [
+    "text",
+    "name",
+    "sha1",
+    "sha256",
+    "sha512"
+  ],
   "attributes": {
+    "characteristics": {
+      "sane_default": [
+        "read",
+        "write",
+        "executable"
+      ],
+      "misp-usage-frequency": 0,
+      "misp-attribute": "text"
+    },
     "name": {
-      "misp-attribute": "text",
-      "misp-usage-frequency": 1,
+      "disable_correlation": true,
       "sane_default": [
         ".rsrc",
         ".reloc",
@@ -15,58 +25,48 @@
         ".data",
         ".text"
       ],
-      "disable_correlation": true
-    },
-    "characteristics": {
-      "misp-attribute": "text",
-      "misp-usage-frequency": 0,
-      "sane_default": [
-        "read",
-        "write",
-        "executable"
-      ]
-    },
-    "text": {
-      "misp-attribute": "text",
       "misp-usage-frequency": 1,
-      "disable_correlation": true
+      "misp-attribute": "text"
     },
     "size-in-bytes": {
-      "misp-attribute": "size-in-bytes",
+      "disable_correlation": true,
       "misp-usage-frequency": 1,
-      "disable_correlation": true
+      "misp-attribute": "size-in-bytes"
     },
-    "entropy": {
-      "misp-attribute": "float",
-      "misp-usage-frequency": 0,
-      "disable_correlation": true
+    "text": {
+      "disable_correlation": true,
+      "misp-usage-frequency": 1,
+      "misp-attribute": "text"
     },
     "md5": {
-      "misp-attribute": "md5",
-      "misp-usage-frequency": 1
+      "misp-usage-frequency": 1,
+      "misp-attribute": "md5"
     },
-    "sha1": {
-      "misp-attribute": "sha1",
-      "misp-usage-frequency": 0
+    "entropy": {
+      "disable_correlation": true,
+      "misp-usage-frequency": 0,
+      "misp-attribute": "float"
     },
     "sha256": {
-      "misp-attribute": "sha256",
-      "misp-usage-frequency": 0
+      "misp-usage-frequency": 0,
+      "misp-attribute": "sha256"
     },
-    "sha512": {
-      "misp-attribute": "sha512",
-      "misp-usage-frequency": 0
+    "sha1": {
+      "misp-usage-frequency": 0,
+      "misp-attribute": "sha1"
     },
     "ssdeep": {
-      "misp-attribute": "ssdeep",
-      "misp-usage-frequency": 0
+      "misp-usage-frequency": 0,
+      "misp-attribute": "ssdeep"
+    },
+    "sha512": {
+      "misp-usage-frequency": 0,
+      "misp-attribute": "sha512"
     }
   },
-  "requiredOneOf": [
-    "text",
-    "name",
-    "sha1",
-    "sha256",
-    "sha512"
-  ]
+  "version": 1,
+  "description": "Object describing a section of a Portable Executable",
+  "meta-category": "file",
+  "uuid": "198a17d2-a135-4b25-9a32-5aa4e632014a",
+  "name": "pe-section"
 }