diff --git a/objects/pe-section/definition.json b/objects/pe-section/definition.json index 3d1d792..2ef4c3c 100644 --- a/objects/pe-section/definition.json +++ b/objects/pe-section/definition.json @@ -88,6 +88,24 @@ "ui-priority": 1, "misp-attribute": "size-in-bytes" }, + "offset": { + "description": "Section’s offset", + "disable_correlation": true, + "ui-priority": 1, + "misp-attribute": "hex" + }, + "virtual_address": { + "description": "Section’s virtual address", + "disable_correlation": true, + "ui-priority": 1, + "misp-attribute": "hex" + }, + "virtual_size": { + "description": "Section’s virtual size", + "disable_correlation": true, + "ui-priority": 1, + "misp-attribute": "size-in-bytes" + }, "text": { "description": "Free text value to attach to the section", "disable_correlation": true, @@ -106,7 +124,7 @@ "misp-attribute": "text" } }, - "version": 2, + "version": 3, "description": "Object describing a section of a Portable Executable", "meta-category": "file", "uuid": "198a17d2-a135-4b25-9a32-5aa4e632014a",