mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 09:12:45 +01:00
56 lines
1.2 KiB
JSON
56 lines
1.2 KiB
JSON
{
|
|
"_meta": {
|
|
"documentation": "https://www.elastic.co/guide/en/ecs/current/ecs-file.html",
|
|
"ecs_version": "1.12.2"
|
|
},
|
|
"template": {
|
|
"mappings": {
|
|
"properties": {
|
|
"scan": {
|
|
"type": "object",
|
|
"properties": {
|
|
"exiftool": {
|
|
"type": "text"
|
|
},
|
|
"pe": {
|
|
"properties": {
|
|
"flags": {
|
|
"type": "text"
|
|
},
|
|
"image_version": {
|
|
"type": "float"
|
|
},
|
|
"sections": {
|
|
"properties": {
|
|
"entropy": {
|
|
"type": "float"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"elf": {
|
|
"properties": {
|
|
"sections": {
|
|
"properties": {
|
|
"entropy": {
|
|
"type": "long"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"entropy": {
|
|
"properties": {
|
|
"entropy": {
|
|
"type": "float"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|