new: Add offset, virtual_address and virtual_size to the pe section object

Related to https://github.com/MISP/PyMISP/issues/388
pull/187/head
Raphaël Vinot 2019-05-03 11:18:58 +02:00
parent e76e492894
commit f2e8195d50
1 changed files with 19 additions and 1 deletions

View File

@ -88,6 +88,24 @@
"ui-priority": 1,
"misp-attribute": "size-in-bytes"
},
"offset": {
"description": "Sections offset",
"disable_correlation": true,
"ui-priority": 1,
"misp-attribute": "hex"
},
"virtual_address": {
"description": "Sections virtual address",
"disable_correlation": true,
"ui-priority": 1,
"misp-attribute": "hex"
},
"virtual_size": {
"description": "Sections virtual size",
"disable_correlation": true,
"ui-priority": 1,
"misp-attribute": "size-in-bytes"
},
"text": {
"description": "Free text value to attach to the section",
"disable_correlation": true,
@ -106,7 +124,7 @@
"misp-attribute": "text"
}
},
"version": 2,
"version": 3,
"description": "Object describing a section of a Portable Executable",
"meta-category": "file",
"uuid": "198a17d2-a135-4b25-9a32-5aa4e632014a",