From 10c0dd0dfefe6758a3dd383dd5b71d89a397d2a2 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Tue, 13 Oct 2020 22:32:27 +0200 Subject: [PATCH] chg: [datamodels] telfhash added --- _pages/datamodels.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/_pages/datamodels.md b/_pages/datamodels.md index 1693fbd..cd5d608 100755 --- a/_pages/datamodels.md +++ b/_pages/datamodels.md @@ -171,6 +171,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/ |target-machine| | | | | | | |target-org| | | | | | | |target-user| | | | | | | +|telfhash| | X | | | | | |text| X | X | X | X | X | X | |threat-actor| | | X | | | | |tlsh| | | | | | | @@ -353,6 +354,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/ |target-machine| | | | | | | |target-org| | | | | | | |target-user| | | | | | | +|telfhash| | | X | X | | | |text| X | X | X | X | X | X | |threat-actor| | | | | | | |tlsh| | | X | X | | | @@ -535,6 +537,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/ |target-machine| | | | X | |target-org| | | | X | |target-user| | | | X | +|telfhash| | | | | |text| X | X | X | | |threat-actor| | | | | |tlsh| | | | | @@ -737,6 +740,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/ * **target-machine**: Attack Targets Machine Name(s) * **target-org**: Attack Targets Department or Organization(s) * **target-user**: Attack Targets Username(s) +* **telfhash**: telfhash is symbol hash for ELF files, just like imphash is imports hash for PE files. * **text**: Name, ID or a reference * **threat-actor**: A string identifying the threat actor * **tlsh**: A checksum in the Trend Micro Locality Sensitive Hash format