Skip to content

Commit e687a2a

Browse files
adulauadulau
committed
chg: [python-evtx-event-log] typo in object name renamed as mentioned in #487 
1 parent 0588c03 commit e687a2a

1 file changed

Lines changed: 171 additions & 0 deletions

File tree

‎objects/python-evtx-event-log/definition.json‎

Lines changed: 171 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,171 @@
1+
{
2+
"attributes": {
3+
"Computer": {
4+
"description": "Computer name on which the event occurred",
5+
"disable_correlation": true,
6+
"misp-attribute": "text",
7+
"ui-priority": 0
8+
},
9+
"Correlation-ID": {
10+
"description": "Unique activity identity which relates the event to a process. ",
11+
"misp-attribute": "text",
12+
"ui-priority": 0
13+
},
14+
"Event-data": {
15+
"description": "Event data description.",
16+
"disable_correlation": true,
17+
"misp-attribute": "text",
18+
"ui-priority": 0
19+
},
20+
"Keywords": {
21+
"description": "Tags used for the event for the purpose of filtering or searching.",
22+
"misp-attribute": "text",
23+
"sane_default": [
24+
"Network",
25+
"Security",
26+
"Resource not found",
27+
"other"
28+
],
29+
"ui-priority": 0
30+
},
31+
"Operational-code": {
32+
"description": "The opcode (numeric value or name) associated with the activity carried out by the event.",
33+
"disable_correlation": true,
34+
"misp-attribute": "text",
35+
"ui-priority": 0
36+
},
37+
"Processor-ID": {
38+
"description": "ID of the processor that processed the event.",
39+
"disable_correlation": true,
40+
"misp-attribute": "text",
41+
"ui-priority": 0
42+
},
43+
"Relative-Correlation-ID": {
44+
"description": "Related activity ID which identity similar activities which occurred as a part of the event.",
45+
"disable_correlation": true,
46+
"misp-attribute": "text",
47+
"ui-priority": 0
48+
},
49+
"Session-ID": {
50+
"description": "Terminal server session ID.",
51+
"disable_correlation": true,
52+
"misp-attribute": "text",
53+
"ui-priority": 0
54+
},
55+
"Thread-ID": {
56+
"description": "Thread id that generated the event.",
57+
"disable_correlation": true,
58+
"misp-attribute": "text",
59+
"ui-priority": 0
60+
},
61+
"User": {
62+
"description": "Name or the User ID the event is associated with.",
63+
"disable_correlation": true,
64+
"misp-attribute": "text",
65+
"ui-priority": 0
66+
},
67+
"comment": {
68+
"description": "Additional comments.",
69+
"disable_correlation": true,
70+
"misp-attribute": "text",
71+
"ui-priority": 0
72+
},
73+
"event-channel": {
74+
"description": " Channel through which the event occurred",
75+
"disable_correlation": true,
76+
"misp-attribute": "text",
77+
"sane_default": [
78+
"Application",
79+
"System",
80+
"Security",
81+
"Setup",
82+
"other"
83+
],
84+
"ui-priority": 3
85+
},
86+
"event-date-time": {
87+
"description": "Date and time when the event was logged.",
88+
"disable_correlation": true,
89+
"misp-attribute": "datetime",
90+
"ui-priority": 0
91+
},
92+
"event-id": {
93+
"description": "A unique number which identifies the event.",
94+
"disable_correlation": true,
95+
"misp-attribute": "text",
96+
"ui-priority": 1
97+
},
98+
"event-type": {
99+
"description": "Event-type assigned to the event",
100+
"disable_correlation": true,
101+
"misp-attribute": "text",
102+
"sane_default": [
103+
"Admin",
104+
"Operational",
105+
"Audit",
106+
"Analytic",
107+
"Debug",
108+
"other"
109+
],
110+
"ui-priority": 0
111+
},
112+
"kernel-time": {
113+
"description": "Execution time of the kernel mode instruction.",
114+
"disable_correlation": true,
115+
"misp-attribute": "datetime",
116+
"ui-priority": 0
117+
},
118+
"level": {
119+
"description": "Determines the event severity.",
120+
"misp-attribute": "text",
121+
"sane_default": [
122+
"Information",
123+
"Warning",
124+
"Error",
125+
"Critical",
126+
"Success Audit",
127+
"Failure Audit"
128+
],
129+
"ui-priority": 0
130+
},
131+
"log": {
132+
"description": "Log file where the event was recorded.",
133+
"disable_correlation": true,
134+
"misp-attribute": "text",
135+
"ui-priority": 0
136+
},
137+
"name": {
138+
"description": "Name of the event.",
139+
"disable_correlation": true,
140+
"misp-attribute": "text",
141+
"ui-priority": 2
142+
},
143+
"source": {
144+
"description": "The source of the event log - application/software that logged the event.",
145+
"misp-attribute": "text",
146+
"ui-priority": 0
147+
},
148+
"task-category": {
149+
"description": "Activity by the event publisher",
150+
"disable_correlation": true,
151+
"misp-attribute": "text",
152+
"ui-priority": 0
153+
},
154+
"user-time": {
155+
"description": "Date and time when the user instruction was executed.",
156+
"disable_correlation": true,
157+
"misp-attribute": "datetime",
158+
"ui-priority": 0
159+
}
160+
},
161+
"description": "Event log object template to share information of the activities conducted on a system. ",
162+
"meta-category": "misc",
163+
"name": "python-evtx-event-log",
164+
"required": [
165+
"source",
166+
"event-type",
167+
"name"
168+
],
169+
"uuid": "94e3aee9-cb99-4503-9bf6-7da3db5de55e",
170+
"version": 2
171+
}

0 commit comments

Comments
 (0)