mirror of https://github.com/MISP/misp-objects
89 lines
1.8 KiB
JSON
89 lines
1.8 KiB
JSON
{
|
|
"name": "elf",
|
|
"uuid": "fa6534ae-ad74-4ce0-8f23-15a66c82c7fa",
|
|
"meta-category": "file",
|
|
"description": "Object describing a Executable and Linkable Format",
|
|
"version": 1,
|
|
"attributes": {
|
|
"text": {
|
|
"misp-attribute": "text",
|
|
"misp-usage-frequency": 1,
|
|
"disable_correlation": true
|
|
},
|
|
"original-filename": {
|
|
"misp-attribute": "filename",
|
|
"misp-usage-frequency": 1
|
|
},
|
|
"e_entry": {
|
|
"misp-attribute": "text",
|
|
"misp-usage-frequency": 0,
|
|
"disable_correlation": true
|
|
},
|
|
"file-description": {
|
|
"misp-attribute": "text",
|
|
"misp-usage-frequency": 0,
|
|
"disable_correlation": true
|
|
},
|
|
"e_version": {
|
|
"misp-attribute": "text",
|
|
"misp-usage-frequency": 0,
|
|
"disable_correlation": true
|
|
},
|
|
"e_type": {
|
|
"misp-attribute": "text",
|
|
"misp-usage-frequency": 0,
|
|
"sane_default": [
|
|
"relocatable",
|
|
"executable",
|
|
"shared",
|
|
"core"
|
|
]
|
|
},
|
|
"e_ident_abi": {
|
|
"misp-attribute": "text",
|
|
"misp-usage-frequency": 0,
|
|
"sane_default": [
|
|
"System V",
|
|
"HP_UX",
|
|
"NetBSD",
|
|
"Linux",
|
|
"Solaris",
|
|
"AIX",
|
|
"IRIX",
|
|
"FreeBSD",
|
|
"True64",
|
|
"Novell Modesto",
|
|
"OpenBSD",
|
|
"OpenVMS",
|
|
"NonStop Kernel",
|
|
"AROS",
|
|
"Fenis OS",
|
|
"CloudABI",
|
|
"Sortix"
|
|
]
|
|
},
|
|
"e_machine": {
|
|
"misp-attribute": "text",
|
|
"misp-usage-frequency": 0,
|
|
"sane_default": [
|
|
"No specific instruction set",
|
|
"SPARC",
|
|
"X86",
|
|
"MISP",
|
|
"PowerPC",
|
|
"ARM",
|
|
"SuperH",
|
|
"IA-64",
|
|
"x86-64",
|
|
"AArch64",
|
|
"RISC-V"
|
|
]
|
|
}
|
|
},
|
|
"requiredOneOf": [
|
|
"text",
|
|
"original-filename",
|
|
"internal-filename"
|
|
]
|
|
}
|