MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [process] disable correlation where it's not required

pull/122/head
Alexandre Dulaunoy 2018-10-06 07:42:34 +02:00
parent 12166166f2
commit 9735995ba1
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
objects/process/definition.json
View File

@ -3,7 +3,7 @@
"uuid": "02aeef94-ac23-455c-addb-731757ceafb5",
"meta-category": "misc",
"description": "Object describing a system process.",
"version": 1,
"version": 2,
"attributes": {
"creation-time": {
"description": "Local date/time at which the process was created.",
@ -25,24 +25,28 @@
"pid": {
"description": "Process ID of the process.",
"ui-priority": 1,
"misp-attribute": "text"
"misp-attribute": "text",
"disable_correlation": true
},
"parent-pid": {
"description": "Process ID of the parent process.",
"ui-priority": 1,
"misp-attribute": "text"
"misp-attribute": "text",
"disable_correlation": true
},
"child-pid": {
"description": "Process ID of the child(ren) process.",
"ui-priority": 1,
"misp-attribute": "text",
"multiple": true
"multiple": true,
"disable_correlation": true
},
"port": {
"description": "Port(s) owned by the process.",
"ui-priority": 1,
"misp-attribute": "src-port",
"multiple": true
"multiple": true,
"disable_correlation": true
}
},
"requiredOneOf": [