digital-forensics-labs/digital-forensics-lab
1
0
Fork 0
mirror of https://github.com/frankwxu/digital-forensics-lab.git synced 2026-04-10 12:13:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

add cloud storage object

Browse Source
This commit is contained in:
Frank Xu
2021-02-14 22:37:58 -05:00
parent d15b937e91
commit 9cd7cb9ce7
1 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
STIX_for_digital_forensics/readme.md
View File

@@ -58,6 +58,7 @@ The xSTIX includes a set of Cyber Forensic Objects (CFOs), customized properties
- [Disk Partition Object](#Disk-Partition-Object)
- [RAM Object](#RAM-Object)
- [Secondary Storage Object](#Secondary-Storage-Object)
- [Cloud Storage Object](#Cloud-Storage-Object)
- [Windows Event Object](#Windows-Event-Object)
- [Webpage Visit Object](#Webpage-Visit-Object)
- [Plug and Play (PnP) Event Object](#Plug-and-Play-PnP-Event-Object)
@@ -771,6 +772,21 @@ Specify a partition with NTFS
}
```
## Cloud Storage Object
**Type Name:** x-cloud-storage
Cloud Storage object represent a cloud space to store data.
| Property Name | Type | Description |
| --------------- | ----------------- | -------------------------------------------------------------------------------------- |
| type (required) | string | The value of this property MUST be x-cloud-storage. |
| app_ref | identifier | Specifier the software. The value MUST be an ID reference to Software. |
| url_ref | identifier | Specifier the url to the storage. The value MUST be an ID reference to URL. |
| local_directory | identifier | Specifier the local storage directory. The value MUST be an ID reference to Directory. |
| contains_refs | list of type file | Specifier a list of Files. |
| size | integer | Specifier the size of storage in MB. |
## Windows Event Object
**Type Name:** x-windows-evt