MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

add: Context where the YARA rule can be applied

pull/98/head
Alexandre Dulaunoy 2018-05-01 11:21:05 +02:00
parent 3382e18393
commit e9e1bdd56c
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
objects/yara/definition.json
View File

@ -20,9 +20,20 @@
"description": "Version of the YARA rule depending where the yara rule is known to work as expected.", "description": "Version of the YARA rule depending where the yara rule is known to work as expected.",
"ui-priority": 0, "ui-priority": 0,
"misp-attribute": "text" "misp-attribute": "text"
},
"context": {
"description": "Context where the YARA rule can be applied",
"sane_default": [
"all",
"disk",
"memory",
"network"
],
"misp-attribute": "text",
"ui-priority": 0
} }
}, },
"version": 2, "version": 3,
"description": "An object describing a YARA rule along with its version.", "description": "An object describing a YARA rule along with its version.",
"meta-category": "misc", "meta-category": "misc",
"uuid": "b5acf82e-ecca-4868-82fe-9dbdf4d808c3", "uuid": "b5acf82e-ecca-4868-82fe-9dbdf4d808c3",