diff --git a/objects/pe-section/definition.json b/objects/pe-section/definition.json index 2bd1ec6..fa4d9d8 100644 --- a/objects/pe-section/definition.json +++ b/objects/pe-section/definition.json @@ -16,6 +16,15 @@ ], "disable_correlation": true }, + "characteristics":{ + "misp-attributes": "text", + "sane_default":[ + "read", + "write", + "executable" + ] + } + , "text": { "misp-attribute": "text", "misp-usage-frequency": 1, @@ -46,6 +55,10 @@ "sha512": { "misp-attribute": "sha512", "misp-usage-frequency": 0 + }, + "ssdeep": { + "misp-attribute": "ssdeep", + "misp-usage-frequency": 0 } }, "requiredOneOf": [