add characteristics and ssdeep to pe-sections

2017-03-13 15:55:29 +01:00 · 2017-03-13 15:55:29 +01:00 · 878d0a30ca
parent c84a830f33
commit 878d0a30ca
1 changed files with 13 additions and 0 deletions
--- a/objects/pe-section/definition.json
+++ b/objects/pe-section/definition.json
@ -16,6 +16,15 @@
      ],
      "disable_correlation": true
    },
+    "characteristics":{
+      "misp-attributes": "text",
+      "sane_default":[
+        "read",
+        "write",
+        "executable"
+      ]
+    }
+    ,
    "text": {
      "misp-attribute": "text",
      "misp-usage-frequency": 1,
@ -46,6 +55,10 @@
    "sha512": {
      "misp-attribute": "sha512",
      "misp-usage-frequency": 0
+    },
+    "ssdeep": {
+      "misp-attribute": "ssdeep",
+      "misp-usage-frequency": 0
    }
  },
  "requiredOneOf": [