mirror of https://github.com/MISP/misp-objects
68 lines
2.0 KiB
JSON
68 lines
2.0 KiB
JSON
{
|
|
"attributes": {
|
|
"comments": {
|
|
"description": "Full name assigned to the user profile.",
|
|
"disable_correlation": true,
|
|
"misp-attribute": "text",
|
|
"ui-priority": 0
|
|
},
|
|
"full-user-name": {
|
|
"description": "Full name assigned to the user profile.",
|
|
"misp-attribute": "text",
|
|
"ui-priority": 0
|
|
},
|
|
"key": {
|
|
"description": "Registry key where the information is retrieved from.",
|
|
"misp-attribute": "text",
|
|
"ui-priority": 0
|
|
},
|
|
"key-last-write-time": {
|
|
"description": "Date and time when the key was last updated.",
|
|
"disable_correlation": true,
|
|
"misp-attribute": "datetime",
|
|
"ui-priority": 0
|
|
},
|
|
"last-login-time": {
|
|
"description": "Date and time when the user last logged onto the system.",
|
|
"disable_correlation": true,
|
|
"misp-attribute": "datetime",
|
|
"ui-priority": 0
|
|
},
|
|
"login-count": {
|
|
"description": "Number of times the user logged-in onto the system.",
|
|
"disable_correlation": true,
|
|
"misp-attribute": "counter",
|
|
"ui-priority": 0
|
|
},
|
|
"pwd-fail-date": {
|
|
"description": "Date and time when a password last failed for this user profile.",
|
|
"disable_correlation": true,
|
|
"misp-attribute": "datetime",
|
|
"ui-priority": 0
|
|
},
|
|
"pwd-reset-time": {
|
|
"description": "Date and time when the password was last reset.",
|
|
"disable_correlation": true,
|
|
"misp-attribute": "datetime",
|
|
"ui-priority": 0
|
|
},
|
|
"user-name": {
|
|
"description": "User name assigned to the user profile.",
|
|
"misp-attribute": "text",
|
|
"ui-priority": 0
|
|
}
|
|
},
|
|
"description": "Regripper Object template designed to present user profile details extracted from the SAM hive.",
|
|
"meta-category": "misc",
|
|
"name": "regripper-sam-hive-single-user",
|
|
"required": [
|
|
"key"
|
|
],
|
|
"requiredOneOf": [
|
|
"user-name",
|
|
"last-login-time",
|
|
"login-count"
|
|
],
|
|
"uuid": "112efd9a-2137-4198-92ed-7c91043e2cd4",
|
|
"version": 1
|
|
} |