digital-forensics-labs/digital-forensics-lab
1
0
Fork 0
mirror of https://github.com/frankwxu/digital-forensics-lab.git synced 2026-04-10 12:13:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

add stix

Browse Source
This commit is contained in:
Frank Xu
2021-01-26 11:28:13 -05:00
parent 607b71a620
commit 84335d8009
1 changed files with 8 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
STIX_external_reference/readme.md
View File

@@ -18,7 +18,7 @@ The goal of the project is to create a list of customized STIX™ Cyber-observab
**Type Name:** x-windows-evt
## Properties
### Properties
| Property Name | Type | Description |
| ------------------------- | ---------- | -------------------------------------------------------------------------------------- |
@@ -33,12 +33,12 @@ The goal of the project is to create a list of customized STIX™ Cyber-observab
| user_account_ref | identifier | The user account that is associated with the evewnt. |
| belongs_to_ref (required) | identity | The relation describes that event is a part of file or artifact (e.g., cache, memory). |
## Relationships
### Relationships
| Source | Relationship Type | Target | Description |
| ------ | ----------------- | ------ | ----------- |
## Log Name Enumeration
### Log Name Enumeration
**Enumeration Name:** log-name-enum
@@ -70,7 +70,7 @@ The goal of the project is to create a list of customized STIX™ Cyber-observab
**Type Name:** x-browser-history-evt
## Properties
### Properties
| Property Name | Type | Description |
| ------------------------- | ---------- | -------------------------------------------------------------------------------------- |
@@ -86,7 +86,7 @@ The goal of the project is to create a list of customized STIX™ Cyber-observab
| user_account_ref | identifier | The user account that is associated with record. |
| belongs_to_ref (required) | identifier | The relation describes that event is a part of file or artifact (e.g., cache, memory). |
## Relationships
### Relationships
| Source | Relationship Type | Target | Description |
| ------ | ----------------- | ------ | ----------- |
@@ -108,7 +108,7 @@ The goal of the project is to create a list of customized STIX™ Cyber-observab
}
```
## Browser Name Open Vocabulary
### Browser Name Open Vocabulary
Vocabulary Name: browser-name-ov
@@ -127,6 +127,8 @@ Vocabulary Name: browser-name-ov
| tor | |
| other | |
---
## threat-actor-type-ov external reference
| Vocabulary Value | Description |