MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

misp-usage-frequency updated

pull/17/head
Alexandre Dulaunoy 2017-07-03 12:18:25 +02:00
parent 405a5451cc
commit 86f8ad974a
1 changed files with 46 additions and 46 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

92
objects/pe-section/definition.json
View File

@ -1,13 +1,23 @@
{ {
"name": "pe-section", "requiredOneOf": [
"uuid": "198a17d2-a135-4b25-9a32-5aa4e632014a", "text",
"meta-category": "file", "name",
"description": "Object describing a section of a Portable Executable", "sha1",
"version": 1, "sha256",
"sha512"
],
"attributes": { "attributes": {
"characteristics": {
"sane_default": [
"read",
"write",
"executable"
],
"misp-usage-frequency": 0,
"misp-attribute": "text"
},
"name": { "name": {
"misp-attribute": "text", "disable_correlation": true,
"misp-usage-frequency": 1,
"sane_default": [ "sane_default": [
".rsrc", ".rsrc",
".reloc", ".reloc",
@ -15,58 +25,48 @@
".data", ".data",
".text" ".text"
], ],
"disable_correlation": true
},
"characteristics": {
"misp-attribute": "text",
"misp-usage-frequency": 0,
"sane_default": [
"read",
"write",
"executable"
]
},
"text": {
"misp-attribute": "text",
"misp-usage-frequency": 1, "misp-usage-frequency": 1,
"disable_correlation": true "misp-attribute": "text"
}, },
"size-in-bytes": { "size-in-bytes": {
"misp-attribute": "size-in-bytes", "disable_correlation": true,
"misp-usage-frequency": 1, "misp-usage-frequency": 1,
"disable_correlation": true "misp-attribute": "size-in-bytes"
}, },
"entropy": { "text": {
"misp-attribute": "float", "disable_correlation": true,
"misp-usage-frequency": 0, "misp-usage-frequency": 1,
"disable_correlation": true "misp-attribute": "text"
}, },
"md5": { "md5": {
"misp-attribute": "md5", "misp-usage-frequency": 1,
"misp-usage-frequency": 1 "misp-attribute": "md5"
}, },
"sha1": { "entropy": {
"misp-attribute": "sha1", "disable_correlation": true,
"misp-usage-frequency": 0 "misp-usage-frequency": 0,
"misp-attribute": "float"
}, },
"sha256": { "sha256": {
"misp-attribute": "sha256", "misp-usage-frequency": 0,
"misp-usage-frequency": 0 "misp-attribute": "sha256"
}, },
"sha512": { "sha1": {
"misp-attribute": "sha512", "misp-usage-frequency": 0,
"misp-usage-frequency": 0 "misp-attribute": "sha1"
}, },
"ssdeep": { "ssdeep": {
"misp-attribute": "ssdeep", "misp-usage-frequency": 0,
"misp-usage-frequency": 0 "misp-attribute": "ssdeep"
},
"sha512": {
"misp-usage-frequency": 0,
"misp-attribute": "sha512"
} }
}, },
"requiredOneOf": [ "version": 1,
"text", "description": "Object describing a section of a Portable Executable",
"name", "meta-category": "file",
"sha1", "uuid": "198a17d2-a135-4b25-9a32-5aa4e632014a",
"sha256", "name": "pe-section"
"sha512"
]
} }