mirror of https://github.com/MISP/misp-objects
new: Add offset, virtual_address and virtual_size to the pe section object
Related to https://github.com/MISP/PyMISP/issues/388pull/187/head
parent
e76e492894
commit
f2e8195d50
|
@ -88,6 +88,24 @@
|
|||
"ui-priority": 1,
|
||||
"misp-attribute": "size-in-bytes"
|
||||
},
|
||||
"offset": {
|
||||
"description": "Section’s offset",
|
||||
"disable_correlation": true,
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "hex"
|
||||
},
|
||||
"virtual_address": {
|
||||
"description": "Section’s virtual address",
|
||||
"disable_correlation": true,
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "hex"
|
||||
},
|
||||
"virtual_size": {
|
||||
"description": "Section’s virtual size",
|
||||
"disable_correlation": true,
|
||||
"ui-priority": 1,
|
||||
"misp-attribute": "size-in-bytes"
|
||||
},
|
||||
"text": {
|
||||
"description": "Free text value to attach to the section",
|
||||
"disable_correlation": true,
|
||||
|
@ -106,7 +124,7 @@
|
|||
"misp-attribute": "text"
|
||||
}
|
||||
},
|
||||
"version": 2,
|
||||
"version": 3,
|
||||
"description": "Object describing a section of a Portable Executable",
|
||||
"meta-category": "file",
|
||||
"uuid": "198a17d2-a135-4b25-9a32-5aa4e632014a",
|
||||
|
|
Loading…
Reference in New Issue