misp-objects/objects/registry-key/definition.json

56 lines
1.2 KiB
JSON

{
"required": [
"key",
"name"
],
"attributes": {
"last-modified": {
"categories": [
"Other"
],
"misp-usage-frequency": 0,
"misp-attribute": "datetime"
},
"data-type": {
"categories": [
"Persistence mechanism"
],
"misp-usage-frequency": 0,
"misp-attribute": "reg-datatype"
},
"data": {
"categories": [
"Persistence mechanism"
],
"misp-usage-frequency": 1,
"misp-attribute": "reg-data"
},
"name": {
"categories": [
"Persistence mechanism"
],
"misp-usage-frequency": 1,
"misp-attribute": "reg-name"
},
"key": {
"categories": [
"Persistence mechanism"
],
"misp-usage-frequency": 1,
"misp-attribute": "reg-key"
},
"hive": {
"categories": [
"Persistence mechanism"
],
"misp-usage-frequency": 1,
"misp-attribute": "reg-hive"
}
},
"version": 1,
"description": "Registry key object describing a Windows registry key with value and last-modified timestamp",
"meta-category": "file",
"uuid": "8b3228ad-6d82-4fe6-b2ae-05426308f1d5",
"name": "registry-key"
}