add: Context where the YARA rule can be applied

2018-05-01 11:21:05 +02:00 · 2018-05-01 11:21:05 +02:00 · e9e1bdd56c
parent 3382e18393
commit e9e1bdd56c
1 changed files with 12 additions and 1 deletions
--- a/objects/yara/definition.json
+++ b/objects/yara/definition.json
@ -20,9 +20,20 @@
      "description": "Version of the YARA rule depending where the yara rule is known to work as expected.",
      "ui-priority": 0,
      "misp-attribute": "text"
+    },
+    "context": {
+      "description": "Context where the YARA rule can be applied",
+      "sane_default": [
+        "all",
+        "disk",
+        "memory",
+        "network"
+      ],
+      "misp-attribute": "text",
+      "ui-priority": 0
    }
  },
-  "version": 2,
+  "version": 3,
  "description": "An object describing a YARA rule along with its version.",
  "meta-category": "misc",
  "uuid": "b5acf82e-ecca-4868-82fe-9dbdf4d808c3",