misp-objects/objects/av-signature/definition.json at main · MISP/misp-objects · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
{
  "attributes": {
    "datetime": {
      "categories": [
        "Other"
      ],
      "description": "Datetime",
      "disable_correlation": true,
      "misp-attribute": "datetime",
      "ui-priority": 0
    },
    "signature": {
      "categories": [
        "Antivirus detection"
      ],
      "description": "Name of detection signature",
      "misp-attribute": "text",
      "ui-priority": 2
    },
    "software": {
      "categories": [
        "Antivirus detection"
      ],
      "description": "Name of antivirus software",
      "disable_correlation": true,
      "misp-attribute": "text",
      "ui-priority": 1
    },
    "text": {
      "categories": [
        "Other"
      ],
      "description": "Free text value to attach to the file",
      "disable_correlation": true,
      "misp-attribute": "text",
      "ui-priority": 0
    }
  },
  "description": "Antivirus detection signature",
  "meta-category": "misc",
  "name": "av-signature",
  "required": [
    "software",
    "signature"
  ],
  "uuid": "4dbb56ef-4763-4c97-8696-a2bfc305cf8e",
  "version": 1
}