definition.json

{
  "required": [
    "software",
    "signature"
  ],
  "attributes": {
    "software": {
      "description": "Name of antivirus software",
      "disable_correlation": true,
      "categories": [
        "Antivirus detection"
      ],
      "ui-priority": 1,
      "misp-attribute": "text"
    },
    "signature": {
      "description": "Name of detection signature",
      "categories": [
        "Antivirus detection"
      ],
      "ui-priority": 2,
      "misp-attribute": "text"
    },
    "text": {
      "description": "Free text value to attach to the file",
      "disable_correlation": true,
      "categories": [
        "Other"
      ],
      "ui-priority": 0,
      "misp-attribute": "text"
    },
    "datetime": {
      "description": "Datetime",
      "disable_correlation": true,
      "categories": [
        "Other"
      ],
      "ui-priority": 0,
      "misp-attribute": "datetime"
    }
  },
  "version": 1,
  "description": "Antivirus detection signature",
  "meta-category": "misc",
  "uuid": "4dbb56ef-4763-4c97-8696-a2bfc305cf8e",
  "name": "av-signature"
}