search

CybOXProject / schemas

CybOX Schemas and Schema Development
42 stars 17 forks source link

Add Missing Properties to PEResourceType in Win Exec File Object #306

Open ikiril01 opened 10 years ago

ikiril01 commented 10 years ago

We should modify the PEResourceType in the Windows Executable File Object to allow for the capture of PE resource offsets.

ikiril01 commented 10 years ago

We should also add the ability to capture resource codepage.

ikiril01 commented 9 years ago

Context: this is useful primarily for malware-related use cases, for more accurately characterizing the properties of a PE binary (i.e. in MAEC).

LOE: Low