20 Commits (main)

Author	SHA1	Message	Date
Christian Studer	3ac509965f	add: [process] Environment variables attribute	2024-01-30 15:19:54 +01:00
Lucas Magalhães	27fce9e7ec	Add sane default for boolean objects	2021-12-20 20:02:29 +00:00
Alexandre Dulaunoy	ffa6ed7963	chg: [process] remove ambiguity between user-creator and current user running the process ... Following CISA/DHS feedback Fix #322	2021-09-14 08:35:02 +02:00
Alexandre Dulaunoy	9185d69d14	chg: [jq] all the [things]	2020-11-24 11:48:22 +01:00
Steve Clement	506116f0ac	chg: [json] sort	2020-11-24 14:58:19 +09:00
Steve Clement	dd6ebe5385	new: [sh] Added process state	2020-11-24 14:55:47 +09:00
Steve Clement	4997dc575c	Merge remote-tracking branch 'upstream/main' into process	2020-11-24 14:45:04 +09:00
Raphaël Vinot	d9f1db590a	chg: Sort all the entries in the templates by default	2020-04-26 02:13:18 +02:00
Steve Clement	003391bab1	Merge remote-tracking branch 'upstream/master' into process	2020-01-14 09:47:45 +09:00
Pierre-Jean Grenier	006e792829	fix: [process] change undefined attributes ... misp-attributes 'uuid' and 'src-port' do not exist, change those to something else so that we can use this object properly	2019-08-06 10:39:43 +02:00
Alexandre Dulaunoy	ab9c1e4cd6	chg: [process] updated following the "mess" of representation in process object ... Ref: https://twitter.com/cyb3rops/status/1150315962501095424	2019-07-15 15:58:55 +02:00
Steve Clement	e67b937f73	chg: [process] revert back to single char in light of the new process-attribute	2019-07-13 12:28:31 +09:00
Steve Clement	eaf0301fe3	chg: [process] Added sane defaults.	2019-07-12 16:04:38 +09:00
Steve Clement	c1a5a52155	chg: [process] Updated process object	2019-07-12 14:33:51 +09:00
Alexandre Dulaunoy	4793bf33ae	chg: [process] fix the type - fix #160	2019-04-02 19:56:59 +02:00
molley	490d760a4b	Added current-directory to required field ... This field will often indicate where a malicious binary is started from, therefore a good candidate for solo use	2019-04-02 17:41:07 +01:00
Thomas Patzke	d41b642bc4	Extension of process object	2018-11-02 00:35:28 +01:00
Alexandre Dulaunoy	9735995ba1	chg: [process] disable correlation where it's not required	2018-10-06 07:42:34 +02:00
chrisr3d	e754719c00	Attribute typo	2018-05-25 09:13:14 +02:00
chrisr3d	6faf42cbd2	First version of process object ... - Potentially more attributes to come	2018-05-04 16:34:35 +02:00