{ "attributes": { "comments": { "description": "Full name assigned to the user profile.", "disable_correlation": true, "misp-attribute": "text", "ui-priority": 0 }, "full-user-name": { "description": "Full name assigned to the user profile.", "misp-attribute": "text", "ui-priority": 0 }, "key": { "description": "Registry key where the information is retrieved from.", "misp-attribute": "text", "ui-priority": 0 }, "key-last-write-time": { "description": "Date and time when the key was last updated.", "disable_correlation": true, "misp-attribute": "datetime", "ui-priority": 0 }, "last-login-time": { "description": "Date and time when the user last logged onto the system.", "disable_correlation": true, "misp-attribute": "datetime", "ui-priority": 0 }, "login-count": { "description": "Number of times the user logged-in onto the system.", "disable_correlation": true, "misp-attribute": "counter", "ui-priority": 0 }, "pwd-fail-date": { "description": "Date and time when a password last failed for this user profile.", "disable_correlation": true, "misp-attribute": "datetime", "ui-priority": 0 }, "pwd-reset-time": { "description": "Date and time when the password was last reset.", "disable_correlation": true, "misp-attribute": "datetime", "ui-priority": 0 }, "user-name": { "description": "User name assigned to the user profile.", "misp-attribute": "text", "ui-priority": 0 } }, "description": "Regripper Object template designed to present user profile details extracted from the SAM hive.", "meta-category": "misc", "name": "regripper-sam-hive-single-user", "required": [ "key" ], "requiredOneOf": [ "user-name", "last-login-time", "login-count" ], "uuid": "112efd9a-2137-4198-92ed-7c91043e2cd4", "version": 1 }