-
Notifications
You must be signed in to change notification settings - Fork 39
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
update to 2020-12, use relative paths for
- Loading branch information
Showing
9 changed files
with
89 additions
and
107 deletions.
There are no files selected for viewing
32 changes: 0 additions & 32 deletions
32
extension-definition-specifications/artifact-805/artifact.json
This file was deleted.
Oops, something went wrong.
59 changes: 33 additions & 26 deletions
59
...ecifications/artifact-805/extension-definition--8053ffa0-dec7-4aef-870e-a56d0082cf69.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,32 +1,39 @@ | ||
| { | ||
| "$schema": "http://json-schema.org/draft-07/schema#", | ||
| "$schema": "https://json-schema.org/draft/2020-12/schema", | ||
| "$id": "https://raw.githubusercontent.com/oasis-open/cti-stix-common-objects/main/extension-definition-specifications/artifact-805/extension-definition--8053ffa0-dec7-4aef-870e-a56d0082cf69.json", | ||
| "title": "malware-sample-artifact-extension", | ||
| "description": "An extension of the Artifact object to allow capture of malware samples.", | ||
| "type": "object", | ||
| "properties": { | ||
| "extensions": { | ||
| "type": "object", | ||
| "properties": { | ||
| "extension-definition--8053ffa0-dec7-4aef-870e-a56d0082cf69": { | ||
| "type": "object", | ||
| "properties": {"extension_type": { | ||
| "type": "string", | ||
| "description": "Defined by STIX 2.1 extension definition rules from 'extension-type-enum'.", | ||
| "enum": ["toplevel-property-extension"] | ||
| }}, | ||
| "required": ["extension_type"] | ||
| }, | ||
| "required": ["extension-definition--8053ffa0-dec7-4aef-870e-a56d0082cf69"] | ||
| } | ||
| }, | ||
| "is_safe": { | ||
| "type": "boolean", | ||
| "description": "Indicates whether the artifact is safe, i.e., can be opened or processed without risking harm or infection. The default value is false." | ||
| } | ||
| }, | ||
| "required": [ | ||
| "extensions", | ||
| "is_safe" | ||
| ] | ||
| "allOf:": [ | ||
| { | ||
| "$ref": "https://raw.githubusercontent.com/oasis-open/cti-stix2-json-schemas/stix2.1/schemas/observables/artifact.json" | ||
| }, | ||
| { | ||
| "properties": { | ||
| "extensions": { | ||
| "type": "object", | ||
| "properties": { | ||
| "extension-definition--8053ffa0-dec7-4aef-870e-a56d0082cf69": { | ||
| "type": "object", | ||
| "properties": {"extension_type": { | ||
| "type": "string", | ||
| "description": "Defined by STIX 2.1 extension definition rules from 'extension-type-enum'.", | ||
| "enum": ["toplevel-property-extension"] | ||
| }}, | ||
| "required": ["extension_type"] | ||
| }, | ||
| "required": ["extension-definition--8053ffa0-dec7-4aef-870e-a56d0082cf69"] | ||
| } | ||
| }, | ||
| "is_safe": { | ||
| "type": "boolean", | ||
| "description": "Indicates whether the artifact is safe, i.e., can be opened or processed without risking harm or infection. The default value is false." | ||
| } | ||
| }, | ||
| "required": [ | ||
| "extensions", | ||
| "is_safe" | ||
| ] | ||
| } | ||
| ] | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
2 changes: 1 addition & 1 deletion
2
...ions/malware-behavior-8e9/extension-definition--d57b7c9c-7fa6-436b-b82c-8e6f69cdc3d0.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
2 changes: 1 addition & 1 deletion
2
extension-definition-specifications/malware-behavior-8e9/malware-behavior.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
89 changes: 48 additions & 41 deletions
89
extension-definition-specifications/malware-behavior-8e9/malware-extension.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,46 +1,53 @@ | ||
| { | ||
| "$schema": "http://json-schema.org/draft-07/schema#", | ||
| "$schema": "https://json-schema.org/draft/2020-12/schema", | ||
| "$id": "https://raw.githubusercontent.com/oasis-open/cti-stix-common-objects/main/extension-definition-specifications/malware-behavior/malware-extension.json", | ||
| "title": "Malware extension for Malware Behavior", | ||
| "description": "Extension to the malware object to support Malware Behavior", | ||
| "properties": { | ||
| "extension_type": { | ||
| "type": "string", | ||
| "enum": [ | ||
| "property-extension" | ||
| ] | ||
| }, | ||
| "obj_defn": { | ||
| "$ref": "https://raw.githubusercontent.com/oasis-open/cti-stix-common-objects/main/extension-definition-specifications/malware-behavior/object-definition.json" | ||
| }, | ||
| "year": { | ||
| "description": "This property denotes the year the malware instance or family was first seen.", | ||
| "type": "string", | ||
| "pattern": "^\\d{4}$" | ||
| }, | ||
| "platforms": { | ||
| "description": "This property denotes the operating system affected by the malware. The values for this property SHOULD come from the os-type-ov open vocabulary.", | ||
| "type": "array", | ||
| "item": { | ||
| "type": "string" | ||
| }, | ||
| "minItems": 1, | ||
| "$comment": "not required, but if used, there must be 1 item" | ||
| } | ||
| }, | ||
| "required": [ | ||
| "obj_defn" | ||
| ], | ||
| "definitions": { | ||
| "os-type-ov": { | ||
| "type": "string", | ||
| "enum": [ | ||
| "android", | ||
| "ios", | ||
| "linux", | ||
| "macos", | ||
| "windows" | ||
| ] | ||
| } | ||
| } | ||
| "allOf:": [ | ||
| { | ||
| "$ref": "https://raw.githubusercontent.com/oasis-open/cti-stix2-json-schemas/stix2.1/schemas/observables/sdos/malware.json" | ||
| }, | ||
| { | ||
| "properties": { | ||
| "extension_type": { | ||
| "type": "string", | ||
| "enum": [ | ||
| "property-extension" | ||
| ] | ||
| }, | ||
| "obj_defn": { | ||
| "$ref": "object-definition.json" | ||
| }, | ||
| "year": { | ||
| "description": "This property denotes the year the malware instance or family was first seen.", | ||
| "type": "string", | ||
| "pattern": "^\\d{4}$" | ||
| }, | ||
| "platforms": { | ||
| "description": "This property denotes the operating system affected by the malware. The values for this property SHOULD come from the os-type-ov open vocabulary.", | ||
| "type": "array", | ||
| "item": { | ||
| "type": "string" | ||
| }, | ||
| "minItems": 1, | ||
| "$comment": "not required, but if used, there must be 1 item" | ||
| } | ||
| }, | ||
| "required": [ | ||
| "obj_defn" | ||
| ], | ||
| "definitions": { | ||
| "os-type-ov": { | ||
| "type": "string", | ||
| "enum": [ | ||
| "android", | ||
| "ios", | ||
| "linux", | ||
| "macos", | ||
| "windows" | ||
| ] | ||
| } | ||
| } | ||
| } | ||
| ] | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
2 changes: 1 addition & 1 deletion
2
extension-definition-specifications/malware-behavior-8e9/object-definition.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters