MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

fix: [pe-optional-header] Added a few missing `disable_correlation` flags

pull/434/head
Christian Studer 2024-07-26 08:55:14 +02:00
parent f3bc011d84
commit ea50f6f1de
No known key found for this signature in database
GPG Key ID: 6BBED1B63A6D639F
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
objects/pe-optional-header/definition.json
View File

@ -52,6 +52,7 @@
}, },
"file-alignment": { "file-alignment": {
"description": "The alignment factor (in bytes) that is used to align the raw data of sections in the image file", "description": "The alignment factor (in bytes) that is used to align the raw data of sections in the image file",
"disable_correlation": true,
"misp-attribute": "size-in-bytes", "misp-attribute": "size-in-bytes",
"ui-priority": 0 "ui-priority": 0
}, },
@ -139,46 +140,55 @@
}, },
"section-alignment": { "section-alignment": {
"description": "The alignment (in bytes) of sections when they are loaded into memory. It must be greater than or equal to file_alignment and the default is the page size for the architecture", "description": "The alignment (in bytes) of sections when they are loaded into memory. It must be greater than or equal to file_alignment and the default is the page size for the architecture",
"disable_correlation": true,
"misp-attribute": "size-in-bytes", "misp-attribute": "size-in-bytes",
"ui-priority": 0 "ui-priority": 0
}, },
"size-of-code": { "size-of-code": {
"description": "The size of the code .text section or the sum of all the sections that contain code", "description": "The size of the code .text section or the sum of all the sections that contain code",
"disable_correlation": true,
"misp-attribute": "size-in-bytes", "misp-attribute": "size-in-bytes",
"ui-priority": 0 "ui-priority": 0
}, },
"size-of-headers": { "size-of-headers": {
"description": "The combined size of an MS-DOS stub, PE header, and section headers rounded up to a multiple of file_alignment", "description": "The combined size of an MS-DOS stub, PE header, and section headers rounded up to a multiple of file_alignment",
"disable_correlation": true,
"misp-attribute": "size-in-bytes", "misp-attribute": "size-in-bytes",
"ui-priority": 0 "ui-priority": 0
}, },
"size-of-heap-commit": { "size-of-heap-commit": {
"description": "The size of the local heap space to commit", "description": "The size of the local heap space to commit",
"disable_correlation": true,
"misp-attribute": "size-in-bytes", "misp-attribute": "size-in-bytes",
"ui-priority": 0 "ui-priority": 0
}, },
"size-of-heap-reserve": { "size-of-heap-reserve": {
"description": "The size of the local heap space to reserve", "description": "The size of the local heap space to reserve",
"disable_correlation": true,
"misp-attribute": "size-in-bytes", "misp-attribute": "size-in-bytes",
"ui-priority": 0 "ui-priority": 0
}, },
"size-of-image": { "size-of-image": {
"description": "The size (in bytes) of the image, including all headers, as the image is loaded in memory", "description": "The size (in bytes) of the image, including all headers, as the image is loaded in memory",
"disable_correlation": true,
"misp-attribute": "size-in-bytes", "misp-attribute": "size-in-bytes",
"ui-priority": 0 "ui-priority": 0
}, },
"size-of-initialised-data": { "size-of-initialised-data": {
"description": "The size of the initialized data which are usually located in the .data section. If the initialized data are split across multiple sections, it is the sum of the sections", "description": "The size of the initialized data which are usually located in the .data section. If the initialized data are split across multiple sections, it is the sum of the sections",
"disable_correlation": true,
"misp-attribute": "size-in-bytes", "misp-attribute": "size-in-bytes",
"ui-priority": 0 "ui-priority": 0
}, },
"size-of-stack-commit": { "size-of-stack-commit": {
"description": "The size of the stack to commit", "description": "The size of the stack to commit",
"disable_correlation": true,
"misp-attribute": "size-in-bytes", "misp-attribute": "size-in-bytes",
"ui-priority": 0 "ui-priority": 0
}, },
"size-of-stack-reserve": { "size-of-stack-reserve": {
"description": "The size of the stack to reserve", "description": "The size of the stack to reserve",
"disable_correlation": true,
"misp-attribute": "size-in-bytes", "misp-attribute": "size-in-bytes",
"ui-priority": 0 "ui-priority": 0
}, },