misp-objects/objects/registry-key/definition.json

56 lines
1.2 KiB
JSON

{
"name": "registry-key",
"uuid": "8b3228ad-6d82-4fe6-b2ae-05426308f1d5",
"meta-category": "file",
"description": "Registry key object describing a Windows registry key with value and last-modified timestamp",
"version": 1,
"attributes": {
"hive": {
"misp-attribute": "reg-hive",
"misp-usage-frequency": 1,
"categories": [
"Persistence mechanism"
]
},
"key": {
"misp-attribute": "reg-key",
"misp-usage-frequency": 1,
"categories": [
"Persistence mechanism"
]
},
"name": {
"misp-attribute": "reg-name",
"misp-usage-frequency": 1,
"categories": [
"Persistence mechanism"
]
},
"data": {
"misp-attribute": "reg-data",
"misp-usage-frequency": 1,
"categories": [
"Persistence mechanism"
]
},
"data-type": {
"misp-attribute": "reg-datatype",
"misp-usage-frequency": 0,
"categories": [
"Persistence mechanism"
]
},
"last-modified": {
"misp-attribute": "datetime",
"misp-usage-frequency": 0,
"categories": [
"Other"
]
}
},
"required": [
"key",
"name"
]
}