MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [yara] disable correlations on some fields

pull/304/head
Alexandre Dulaunoy 2020-12-30 14:46:04 +01:00
parent 4d1c42e491
commit d6d515d3d8
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
objects/yara/definition.json
View File

@ -7,6 +7,7 @@
}, },
"context": { "context": {
"description": "Context where the YARA rule can be applied", "description": "Context where the YARA rule can be applied",
"disable_correlation": true,
"misp-attribute": "text", "misp-attribute": "text",
"sane_default": [ "sane_default": [
"all", "all",
@ -18,6 +19,7 @@
}, },
"version": { "version": {
"description": "Version of the YARA rule depending where the yara rule is known to work as expected.", "description": "Version of the YARA rule depending where the yara rule is known to work as expected.",
"disable_correlation": true,
"misp-attribute": "text", "misp-attribute": "text",
"sane_default": [ "sane_default": [
"3.7.1" "3.7.1"
@ -43,5 +45,5 @@
"yara-rule-name" "yara-rule-name"
], ],
"uuid": "b5acf82e-ecca-4868-82fe-9dbdf4d808c3", "uuid": "b5acf82e-ecca-4868-82fe-9dbdf4d808c3",
"version": 4 "version": 5
} }