Skip to content

Instantly share code, notes, and snippets.

@ikiril01
Last active May 2, 2016 13:17
Show Gist options
  • Save ikiril01/f673b81bffea70e87598dfd89718c951 to your computer and use it in GitHub Desktop.
Save ikiril01/f673b81bffea70e87598dfd89718c951 to your computer and use it in GitHub Desktop.
CybOX Actions - Create File
{
"actions": [{
"id": "action--1",
"type": "cybox-action",
"name": "create file",
"associated_objects": [
{
"type": "associated-object",
"object_ref": "registry-key-object--1",
"association": "output"
},
{
"type": "associated-object",
"object_ref": "process-object--1",
"association": "initiator"
}
]
}],
"objects": [
{
"id": "registry-key-object--1",
"type": "registry-key-object",
"key": "hkey_local_machine\\system\\currentcontrolset\\hardware profiles",
"values": [{
"type": "registry-value",
"name": "currentprofile"
}]
},
{
"id": "process-object--1",
"type": "process-object",
"pid": 1234
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment