{ "requiredOneOf": [ "text", "name", "md5", "sha1", "sha224", "sha256", "sha384", "sha512", "sha512/224", "sha512/256" ], "attributes": { "md5": { "description": "[Insecure] MD5 hash (128 bits)", "ui-priority": 1, "misp-attribute": "md5", "recommended": false }, "sha1": { "description": "[Insecure] Secure Hash Algorithm 1 (160 bits)", "ui-priority": 1, "misp-attribute": "sha1", "recommended": false }, "sha224": { "description": "Secure Hash Algorithm 2 (224 bits)", "ui-priority": 0, "misp-attribute": "sha224", "recommended": false }, "sha256": { "description": "Secure Hash Algorithm 2 (256 bits)", "ui-priority": 1, "misp-attribute": "sha256" }, "sha384": { "description": "Secure Hash Algorithm 2 (384 bits)", "ui-priority": 0, "misp-attribute": "sha384", "recommended": false }, "sha512": { "description": "Secure Hash Algorithm 2 (512 bits)", "ui-priority": 1, "misp-attribute": "sha512" }, "sha512/224": { "description": "Secure Hash Algorithm 2 (224 bits)", "ui-priority": 0, "misp-attribute": "sha512/224", "recommended": false }, "sha512/256": { "description": "Secure Hash Algorithm 2 (256 bits)", "ui-priority": 0, "misp-attribute": "sha512/256", "recommended": false }, "ssdeep": { "description": "Fuzzy hash using context triggered piecewise hashes (CTPH)", "ui-priority": 0, "misp-attribute": "ssdeep" }, "entropy": { "description": "Entropy of the whole section", "disable_correlation": true, "ui-priority": 0, "misp-attribute": "float" }, "name": { "description": "Name of the section", "disable_correlation": true, "ui-priority": 1, "misp-attribute": "text" }, "size-in-bytes": { "description": "Size of the section, in bytes", "disable_correlation": true, "ui-priority": 1, "misp-attribute": "size-in-bytes" }, "text": { "description": "Free text value to attach to the section", "disable_correlation": true, "ui-priority": 1, "misp-attribute": "text", "recommended": false } }, "version": 2, "description": "Object describing a section of a file in Mach-O format.", "meta-category": "file", "uuid": "fca3c534-d188-4964-9c6e-9922e1dfe66e", "name": "macho-section" }