116116 "misp-attribute" : " text" ,
117117 "ui-priority" : 0
118118 },
119+ "lnk-mft-object" : {
120+ "description" : " LinkTargetIDList MFT entry. Name:MFTID|SeqID|BTimestamp" ,
121+ "misp-attribute" : " text" ,
122+ "multiple" : true ,
123+ "ui-priority" : 0
124+ },
119125 "lnk-modification-time" : {
120126 "categories" : [
121127 " Other"
125131 "misp-attribute" : " datetime" ,
126132 "ui-priority" : 0
127133 },
134+ "lnk-propertystore-sid" : {
135+ "description" : " SID reference in ExtraData.PropertyStore" ,
136+ "misp-attribute" : " text" ,
137+ "ui-priority" : 0
138+ },
128139 "lnk-relative-path" : {
129140 "description" : " Relative path" ,
130141 "disable_correlation" : true ,
149160 "misp-attribute" : " text" ,
150161 "ui-priority" : 0
151162 },
152- "lnk-mft-object" : {
153- "description" : " LinkTargetIDList MFT entry. Name:MFTID|SeqID|BTimestamp" ,
154- "misp-attribute" : " text" ,
155- "multiple" : true ,
156- "ui-priority" : 0
157- },
158- "lnk-propertystore-sid" : {
159- "description" : " SID reference in ExtraData.PropertyStore" ,
160- "misp-attribute" : " text" ,
161- "ui-priority" : 0
162- },
163163 "machine-identifier" : {
164164 "description" : " Machine identifier" ,
165165 "misp-attribute" : " text" ,
260260 "text" : {
261261 "description" : " Free text value to attach to the file" ,
262262 "disable_correlation" : true ,
263- "multiple" : true ,
264263 "misp-attribute" : " text" ,
264+ "multiple" : true ,
265265 "recommended" : false ,
266266 "ui-priority" : 1
267267 },
287287 " sha512/256"
288288 ],
289289 "uuid" : " ad13533e-1853-4da0-a111-33a7ce7e6c09" ,
290- "version" : 1.1
291- }
290+ "version" : 2
291+ }
0 commit comments