misp-objects/objects/registry-key/definition.json at 30512f69af184282d8009325ada9e193e91d0949 · MISP/misp-objects · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
{
        "name": "registry-key",
        "meta-category": "file",
        "description": "Registry key object describing a Windows registry key with value and last-modified timestamp",
        "version": 1,
        "attributes" :
        {
		"hive": {
			"misp-attribute": "reg-hive",
			"misp-usage-frequency": 1,
			"categories": ["Persistence mechanism"]
		},
		"key": {
			"misp-attribute": "reg-key",
			"misp-usage-frequency": 1,
			"categories": ["Persistence mechanism"]
		},
		"name": {
			"misp-attribute": "reg-name",
			"misp-usage-frequency": 1,
			"categories": ["Persistence mechanism"]
		},
		"data": {
			"misp-attribute": "reg-data",
			"misp-usage-frequency": 1,
			"categories": ["Persistence mechanism"]
		},
		"data-type": {
			"misp-attribute": "reg-datatype",
			"misp-usage-frequency": 0,
			"categories": ["Persistence mechanism"]
		},
		"last-modified": {
			"misp-attribute": "datetime",
			"misp-usage-frequency": 0,
			"categories": ["Other"]
		}
        },
	"required": ["key", "name"]
}