MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [process] Updated process object

pull/192/head
Steve Clement 2019-07-12 14:33:51 +09:00
parent 919f6638e1
commit c1a5a52155
No known key found for this signature in database
GPG Key ID: 69A20F509BE4AEE9
1 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
objects/process/definition.json
View File

@ -3,7 +3,7 @@
"uuid": "02aeef94-ac23-455c-addb-731757ceafb5", "uuid": "02aeef94-ac23-455c-addb-731757ceafb5",
"meta-category": "misc", "meta-category": "misc",
"description": "Object describing a system process.", "description": "Object describing a system process.",
"version": 5, "version": 6,
"attributes": { "attributes": {
"creation-time": { "creation-time": {
"description": "Local date/time at which the process was created.", "description": "Local date/time at which the process was created.",
@ -41,6 +41,20 @@
"multiple": true, "multiple": true,
"disable_correlation": true "disable_correlation": true
}, },
"process-state": {
"description": "State of process. (ps codes R/S/Z...)",
"ui-priority": 1,
"misp-attribute": "text",
"multiple": false,
"disable_correlation": true
},
"fake-process-name": {
"description": "Is the process spawned under a false name.",
"ui-priority": 1,
"misp-attribute": "boolean",
"multiple": false,
"disable_correlation": true
},
"port": { "port": {
"description": "Port(s) owned by the process.", "description": "Port(s) owned by the process.",
"ui-priority": 1, "ui-priority": 1,