Add mapping for scan.pe.sections.entropy

2025-12-06 17:22:49 +01:00 · 2022-01-14 16:58:53 -05:00
parent a63787daba
commit a90bc9dba9
1 changed files with 12 additions and 1 deletions
--- a/salt/elasticsearch/templates/so/so-common-template.json.jinja
+++ b/salt/elasticsearch/templates/so/so-common-template.json.jinja
@@ -734,6 +734,17 @@
 	  "properties":{
            "exiftool":{
              "type":"text"
+             },
+	     "pe":{
+	       "properties":{
+	         "sections":{
+		   "properties":{
+		     "entropy":{
+		       "type": "float"
+		     }
+		   }
+		 }
+	       }
 	     }
          }
        },