diff --git a/_pages/datamodels.md b/_pages/datamodels.md index 4427991..d1fdfb6 100755 --- a/_pages/datamodels.md +++ b/_pages/datamodels.md @@ -32,6 +32,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/ |campaign-id| | | X | | | | |campaign-name| | | X | | | | |cc-number| | | | | X | | +|cdhash| | X | | | | | |comment| X | X | X | X | X | X | |cookie| | X | | | | | |cortex| | | | X | | | @@ -187,6 +188,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/ |campaign-id| | | | | | | |campaign-name| | | | | | | |cc-number| | | | | | | +|cdhash| | | X | X | | | |comment| X | X | X | X | X | X | |cookie| X | | | | | | |cortex| | | | | | | @@ -321,9 +323,9 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/ |windows-scheduled-task| | | | | | | |windows-service-displayname| | | | | | | |windows-service-name| | | | | | | -|x509-fingerprint-md5| | | X | X | | | +|x509-fingerprint-md5| X | | X | X | | | |x509-fingerprint-sha1| X | | X | X | | | -|x509-fingerprint-sha256| | | X | X | | | +|x509-fingerprint-sha256| X | | X | X | | | |xmr| | | | | | | |yara| | | X | X | | | @@ -342,6 +344,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/ |campaign-id| | | | | |campaign-name| | | | | |cc-number| | | | | +|cdhash| | | | | |comment| X | X | X | X | |cookie| | | | | |cortex| | | | | @@ -517,6 +520,7 @@ The MISP format is described as Internet-Draft in [misp-rfc](https://github.com/ * **campaign-id**: Associated campaign ID * **campaign-name**: Associated campaign name * **cc-number**: Credit-Card Number +* **cdhash**: An Apple Code Directory Hash, identifying a code-signed Mach-O executable file * **comment**: Comment or description in a human language * **cookie**: HTTP cookie as often stored on the user web client. This can include authentication cookie or session cookie. * **cortex**: Cortex analysis result