CybOXProject / schemas

CybOX Schemas and Schema Development
42 stars 17 forks source link

Removed Type from PESectionType in Windows Executable File Object and removed associated Types #251

Closed ikiril01 closed 10 years ago

ikiril01 commented 10 years ago

Remove the Type field from the PESectionType and the associated PESectionTypeEnum and PESectionType that were used in this field. There's no way to accurately characterize the "type" of a section in a PE file, so this field was misleading and also conflicted with the Name field in the PESectionHeaderStructType, which is a more accurate way of capturing this data.

This should close #250.