CybOXProject / schemas

CybOX Schemas and Schema Development
42 stars 17 forks source link

Add Missing Fields to PESectionType in Windows Executable File Object #293

Open ikiril01 opened 10 years ago

ikiril01 commented 10 years ago

We should consider adding the following fields to the PESectionType in the Windows Executable File Object:

ikiril01 commented 9 years ago

Context: this is useful primarily for malware-related use cases, for more accurately characterizing the properties of a PE binary (i.e. in MAEC).

LOE: Low