MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

new: Add offset, virtual_address and virtual_size to the pe section object 

Related to https://github.com/MISP/PyMISP/issues/388
pull/187/head
Raphaël Vinot 2019-05-03 11:18:58 +02:00
parent e76e492894
commit f2e8195d50
1 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
objects/pe-section/definition.json
View File

@ -88,6 +88,24 @@
"ui-priority": 1, "ui-priority": 1,
"misp-attribute": "size-in-bytes" "misp-attribute": "size-in-bytes"
}, },
"offset": {
"description": "Section’s offset",
"disable_correlation": true,
"ui-priority": 1,
"misp-attribute": "hex"
},
"virtual_address": {
"description": "Section’s virtual address",
"disable_correlation": true,
"ui-priority": 1,
"misp-attribute": "hex"
},
"virtual_size": {
"description": "Section’s virtual size",
"disable_correlation": true,
"ui-priority": 1,
"misp-attribute": "size-in-bytes"
},
"text": { "text": {
"description": "Free text value to attach to the section", "description": "Free text value to attach to the section",
"disable_correlation": true, "disable_correlation": true,
@ -106,7 +124,7 @@
"misp-attribute": "text" "misp-attribute": "text"
} }
}, },
"version": 2, "version": 3,
"description": "Object describing a section of a Portable Executable", "description": "Object describing a section of a Portable Executable",
"meta-category": "file", "meta-category": "file",
"uuid": "198a17d2-a135-4b25-9a32-5aa4e632014a", "uuid": "198a17d2-a135-4b25-9a32-5aa4e632014a",