Update file and pe, add pe-section

objects/file/definition.json

@@ -26,32 +26,28 @@
       "misp-attribute": "ssdeep",
       "misp-usage-frequency": 0
     },
-    "imphash": {
-      "misp-attribute": "imphash",
-      "misp-usage-frequency": 0
-    },
     "pehash": {
       "misp-attribute": "pehash",
       "misp-usage-frequency": 0
     },
-    "sha-224": {
+    "sha224": {
-      "misp-attribute": "sha-224",
+      "misp-attribute": "sha224",
       "misp-usage-frequency": 0
     },
-    "sha-384": {
+    "sha384": {
-      "misp-attribute": "sha-384",
+      "misp-attribute": "sha384",
       "misp-usage-frequency": 0
     },
-    "sha-512": {
+    "sha512": {
-      "misp-attribute": "sha-512",
+      "misp-attribute": "sha512",
       "misp-usage-frequency": 0
     },
-    "sha-512/224": {
+    "sha512/224": {
-      "misp-attribute": "sha-512/224",
+      "misp-attribute": "sha512/224",
       "misp-usage-frequency": 0
     },
-    "sha-512/256": {
+    "sha512/256": {
-      "misp-attribute": "sha-512/256",
+      "misp-attribute": "sha512/256",
       "misp-usage-frequency": 0
     },
     "tlsh": {
@@ -70,6 +66,10 @@
       "misp-attribute": "sha256",
       "misp-usage-frequency": 1
     },
+    "entropy": {
+      "misp-attribute": "float",
+      "misp-usage-frequency": 1
+    },
     "pattern-in-file": {
       "misp-attribute": "pattern-in-file",
       "misp-usage-frequency": 1,
@@ -82,14 +82,6 @@
     "text": {
       "misp-attribute": "text",
       "misp-usage-frequency": 1
-    },
-    "original-filename": {
-      "misp-attribute": "original-filename",
-      "misp-usage-frequency": 0
-    },
-    "compilation-timestamp": {
-      "misp-attribute": "compilation-timestamp",
-      "misp-usage-frequency": 0
     }
   },
   "requiredOneOf": [
@@ -99,11 +91,11 @@
     "ssdeep",
     "imphash",
     "pehash",
-    "sha-224",
+    "sha224",
-    "sha-384",
+    "sha384",
-    "sha-512",
+    "sha512",
-    "sha-512/224",
+    "sha512/224",
-    "sha-512/256",
+    "sha512/256",
     "tlsh",
     "md5",
     "sha1",

objects/pe-section/definition.json

@@ -0,0 +1,47 @@
+{
+  "name": "pe-section",
+  "meta-category": "file",
+  "description": "Object describing a section of a Portable Executable",
+  "version": 1,
+  "attributes": {
+    "name": {
+      "misp-attribute": "text",
+      "misp-usage-frequency": 1
+    },
+    "text": {
+      "misp-attribute": "text",
+      "misp-usage-frequency": 1
+    },
+    "size-in-bytes": {
+      "misp-attribute": "size-in-bytes",
+      "misp-usage-frequency": 1
+    },
+    "entropy": {
+      "misp-attribute": "float",
+      "misp-usage-frequency": 0
+    },
+    "md5": {
+      "misp-attribute": "md5",
+      "misp-usage-frequency": 1
+    },
+    "sha1": {
+      "misp-attribute": "sha1",
+      "misp-usage-frequency": 0
+    },
+    "sha256": {
+      "misp-attribute": "sha256",
+      "misp-usage-frequency": 0
+    },
+    "sha512": {
+      "misp-attribute": "sha512",
+      "misp-usage-frequency": 0
+    }
+  },
+  "requiredOneOf": [
+    "text",
+    "name",
+    "sha1",
+    "sha256",
+    "sha512"
+  ]
+}

objects/pe/definition.json

@@ -13,22 +13,18 @@
       "misp-usage-frequency": 1
     },
     "original-filename": {
-      "misp-attribute": "original-filename",
+      "misp-attribute": "text",
       "misp-usage-frequency": 1
     },
     "internal-filename": {
-      "misp-attribute": "original-filename",
+      "misp-attribute": "text",
       "misp-usage-frequency": 0
     },
     "compilation-timestamp": {
       "misp-attribute": "datetime",
       "misp-usage-frequency": 1
     },
-    "entropy": {
+    "entrypoint-section|position": {
-      "misp-attribute": "float",
-      "misp-usage-frequency": 0
-    },
-    "entrypoint-section": {
       "misp-attribute": "text",
       "misp-usage-frequency": 0
     },
@@ -55,6 +51,18 @@
     "product-version": {
       "misp-attribute": "text",
       "misp-usage-frequency": 0
+    },
+    "company-name": {
+      "misp-attribute": "text",
+      "misp-usage-frequency": 0
+    },
+    "legal-copyright": {
+      "misp-attribute": "text",
+      "misp-usage-frequency": 0
+    },
+    "pe-type": {
+      "misp-attribute": "text",
+      "misp-usage-frequency": 0
     }
   },
   "requiredOneOf": [