mirror of https://github.com/MISP/misp-objects
chg: [pe] Added `characteristics` & `machine-type` enumerations
- Characteristics are usually in a list, so we have now both the list of characteristics with their name, and the hex value of the addition of all the characteristics numeric values - We represent the machine type with its namepull/425/head
parent
ad952beb60
commit
eb1536f505
|
@ -8,6 +8,30 @@
|
||||||
"characteristics": {
|
"characteristics": {
|
||||||
"description": "The characteristics that indicate the attributes of the file",
|
"description": "The characteristics that indicate the attributes of the file",
|
||||||
"disable_correlation": true,
|
"disable_correlation": true,
|
||||||
|
"misp-attribute": "text",
|
||||||
|
"multiple": true,
|
||||||
|
"sane_defaults": [
|
||||||
|
"AGGRESSIVE_WS_TRIM",
|
||||||
|
"BYTES_REVERSED_HI",
|
||||||
|
"BYTES_REVERSED_LO",
|
||||||
|
"DEBUG_STRIPPED",
|
||||||
|
"DLL",
|
||||||
|
"EXECUTABLE_IMAGE",
|
||||||
|
"LARGE_ADDRESS_AWARE",
|
||||||
|
"LINE_NUMS_STRIPPED",
|
||||||
|
"LOCAL_SYMS_STRIPPED",
|
||||||
|
"NEED_32BIT_MACHINE",
|
||||||
|
"NET_RUN_FROM_SWAP",
|
||||||
|
"RELOCS_STRIPPED",
|
||||||
|
"REMOVABLE_RUN_FROM_SWAP",
|
||||||
|
"SYSTEM",
|
||||||
|
"UP_SYSTEM_ONLY"
|
||||||
|
],
|
||||||
|
"ui-priority": 0
|
||||||
|
},
|
||||||
|
"characteristics_hex": {
|
||||||
|
"description": "The characteristics in a single hex value",
|
||||||
|
"disable_correlation": true,
|
||||||
"misp-attribute": "hex",
|
"misp-attribute": "hex",
|
||||||
"ui-priority": 0
|
"ui-priority": 0
|
||||||
},
|
},
|
||||||
|
@ -77,7 +101,31 @@
|
||||||
"machine-type": {
|
"machine-type": {
|
||||||
"description": "Type of machine",
|
"description": "Type of machine",
|
||||||
"disable_correlation": true,
|
"disable_correlation": true,
|
||||||
"misp-attribute": "hex",
|
"misp-attribute": "text",
|
||||||
|
"sane_default": [
|
||||||
|
"AM33",
|
||||||
|
"AMD64",
|
||||||
|
"ARM",
|
||||||
|
"ARM64",
|
||||||
|
"ARMNT",
|
||||||
|
"EBC",
|
||||||
|
"I386",
|
||||||
|
"IA64",
|
||||||
|
"M32R",
|
||||||
|
"MIPS16",
|
||||||
|
"MIPSFPU",
|
||||||
|
"MIPSFPU16",
|
||||||
|
"POWERPC",
|
||||||
|
"POWERPCFP",
|
||||||
|
"R4000",
|
||||||
|
"SH3",
|
||||||
|
"SH3DSP",
|
||||||
|
"SH4",
|
||||||
|
"SH5",
|
||||||
|
"THUMB",
|
||||||
|
"UNKNOWN",
|
||||||
|
"WCEMIPSV2"
|
||||||
|
],
|
||||||
"ui-priority": 0
|
"ui-priority": 0
|
||||||
},
|
},
|
||||||
"number-of-symbols": {
|
"number-of-symbols": {
|
||||||
|
|
Loading…
Reference in New Issue