From fc182be371e08cdb0278326166c1eddf4baff088 Mon Sep 17 00:00:00 2001
From: Pierre-Jean Grenier <zaphod@eleves.polytechnique.fr>
Date: Fri, 2 Aug 2019 14:37:08 +0200
Subject: [PATCH] Change undefined category to "External analysis"

---
 objects/sb-signature/definition.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/objects/sb-signature/definition.json b/objects/sb-signature/definition.json
index 481d02d..2ee7cde 100644
--- a/objects/sb-signature/definition.json
+++ b/objects/sb-signature/definition.json
@@ -8,7 +8,7 @@
       "description": "Name of Sandbox software",
       "disable_correlation": true,
       "categories": [
-        "Sandbox detection"
+        "External analysis"
       ],
       "ui-priority": 1,
       "misp-attribute": "text"
@@ -16,7 +16,7 @@
     "signature": {
       "description": "Name of detection signature - set the description of the detection signature as a comment",
       "categories": [
-        "Sandbox detection"
+        "External analysis"
       ],
       "ui-priority": 2,
       "misp-attribute": "text",
@@ -41,7 +41,7 @@
       "misp-attribute": "datetime"
     }
   },
-  "version": 1,
+  "version": 2,
   "description": "Sandbox detection signature",
   "meta-category": "misc",
   "uuid": "984c5c39-be7f-4e1e-b034-d3213bac51cb",