MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

misp-usage-frequency updated

pull/17/head
Alexandre Dulaunoy 2017-07-03 12:09:46 +02:00
parent 0949bd47ca
commit a8b1a0a512
1 changed files with 60 additions and 60 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

120
objects/elf/definition.json
View File

@ -1,47 +1,28 @@
{ {
"name": "elf", "requiredOneOf": [
"uuid": "fa6534ae-ad74-4ce0-8f23-15a66c82c7fa", "text",
"meta-category": "file", "original-filename",
"description": "Object describing a Executable and Linkable Format", "internal-filename"
"version": 1, ],
"attributes": { "attributes": {
"text": { "e_machine": {
"misp-attribute": "text",
"misp-usage-frequency": 1,
"disable_correlation": true
},
"original-filename": {
"misp-attribute": "filename",
"misp-usage-frequency": 1
},
"e_entry": {
"misp-attribute": "text",
"misp-usage-frequency": 0,
"disable_correlation": true
},
"file-description": {
"misp-attribute": "text",
"misp-usage-frequency": 0,
"disable_correlation": true
},
"e_version": {
"misp-attribute": "text",
"misp-usage-frequency": 0,
"disable_correlation": true
},
"e_type": {
"misp-attribute": "text",
"misp-usage-frequency": 0,
"sane_default": [ "sane_default": [
"relocatable", "No specific instruction set",
"executable", "SPARC",
"shared", "X86",
"core" "MISP",
] "PowerPC",
"ARM",
"SuperH",
"IA-64",
"x86-64",
"AArch64",
"RISC-V"
],
"ui-frequency": 0,
"misp-attribute": "text"
}, },
"e_ident_abi": { "e_ident_abi": {
"misp-attribute": "text",
"misp-usage-frequency": 0,
"sane_default": [ "sane_default": [
"System V", "System V",
"HP_UX", "HP_UX",
@ -60,29 +41,48 @@
"Fenis OS", "Fenis OS",
"CloudABI", "CloudABI",
"Sortix" "Sortix"
] ],
"ui-frequency": 0,
"misp-attribute": "text"
}, },
"e_machine": { "e_type": {
"misp-attribute": "text",
"misp-usage-frequency": 0,
"sane_default": [ "sane_default": [
"No specific instruction set", "relocatable",
"SPARC", "executable",
"X86", "shared",
"MISP", "core"
"PowerPC", ],
"ARM", "ui-frequency": 0,
"SuperH", "misp-attribute": "text"
"IA-64", },
"x86-64", "e_version": {
"AArch64", "disable_correlation": true,
"RISC-V" "ui-frequency": 0,
] "misp-attribute": "text"
},
"file-description": {
"disable_correlation": true,
"ui-frequency": 0,
"misp-attribute": "text"
},
"e_entry": {
"disable_correlation": true,
"ui-frequency": 0,
"misp-attribute": "text"
},
"original-filename": {
"ui-frequency": 1,
"misp-attribute": "filename"
},
"text": {
"disable_correlation": true,
"ui-frequency": 1,
"misp-attribute": "text"
} }
}, },
"requiredOneOf": [ "version": 1,
"text", "description": "Object describing a Executable and Linkable Format",
"original-filename", "meta-category": "file",
"internal-filename" "uuid": "fa6534ae-ad74-4ce0-8f23-15a66c82c7fa",
] "name": "elf"
} }