Skip to content

Instantly share code, notes, and snippets.

@ikiril01
Created April 5, 2016 17:47
Show Gist options
  • Save ikiril01/eafcaedc3b34c47a45fa6f3c80e78465 to your computer and use it in GitHub Desktop.
Save ikiril01/eafcaedc3b34c47a45fa6f3c80e78465 to your computer and use it in GitHub Desktop.
Recursive Archive File Characterization (embedded) - TLO
{
"type": "package",
"spec_version": "stix-2.0",
"objects": [{
"id": "file-object--1",
"type": "file-object",
"hashes": {"md5": "C37D819D0C4C16865E9519478897D5D4"},
"extended-properties": {"archive": {
"file_count": 1,
"contained_objects": [{
"type": "file-object",
"hashes": {"md5": "B4D33B0C7306351B9ED96578465C5579"},
"extended-properties": {"archive": {
"file_count": 1,
"contained_objects": [{
"type": "file-object",
"hashes": {"md5": "B4D33B0C7306351B9ED96578465C5579"}
}]
}}
}]
}}
}],
"observations": [{
"type": "observation",
"id": "observation--4",
"spec_version": "stix-2.0",
"created_at": "2016-03-21T01:01:01Z",
"observed_at": "2016-03-21T01:01:01Z",
"object_ref": "file-object--1"
}]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment