misp-objects/objects/command-line/definition.json at main · MISP/misp-objects · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
{
  "attributes": {
    "command_line": {
      "description": "command code line",
      "misp-attribute": "text",
      "multiple": true,
      "ui-priority": 1
    },
    "description": {
      "description": "description of the command",
      "misp-attribute": "text",
      "ui-priority": 1
    },
    "software": {
      "description": "type of shell (bash/sh,powershell,cmd.exe)",
      "misp-attribute": "text",
      "sane_default": [
        "Shell",
        "Bash",
        "zsh",
        "Powershell",
        "cmd.exe"
      ],
      "ui-priority": 1
    }
  },
  "description": "Command line and options related to a specific command executed by a program, whether it is malicious or not.",
  "meta-category": "misc",
  "name": "command-line",
  "required": [
    "command_line"
  ],
  "uuid": "88ebe222-d3cc-11e9-875d-7f13f460adaf",
  "version": 2
}