ObjectType is intended to serve as a method for the characterization
of any entities that actions and behaviors operate on or are associated
with.The object_name attribute specifies the name of the object, if
applicable.The type attribute is intended to characterize the type of
object being characterized in this element. Possible values are: URI,
Host, Session, Session Token, Account, Device (physical), Handle,
Heap,Memory Address, Memory Page, Window, Dialog, Parameter,
Authentication Token,Encryption Token, Web Query, Protocol Header,
Protocol Field, Link, SQL Query,Database, ACL, Role, System, VM,
Signature, Channel, API Call, Environment Variable, Application, Network,
Configuration, Policy, Tack, Malware, Message,Email Message, Media,
Operating System, Query, Domain, Event, OtherThe permanent attribute is
intended to characterize whether an object stays resident after execution
of the malware, that is, whather or not it remains on the filesystem or
other non-volatile entity in some fashion.
|
__init__(self,
object_name=None,
permanent=None,
type_=None,
id=None,
Object_Size=None,
Classifications=None,
Associated_Code=None,
Related_Objects=None,
File_System_Object_Attributes=None,
GUI_Object_Attributes=None,
IPC_Object_Attributes=None,
Internet_Object_Attributes=None,
Module_Object_Attributes=None,
Registry_Object_Attributes=None,
Process_Object_Attributes=None,
Memory_Object_Attributes=None,
Network_Object_Attributes=None,
Daemon_Object_Attributes=None,
Custom_Object_Attributes=None)
x.__init__(...) initializes x; see help(type(x)) for signature |
source code
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
set_File_System_Object_Attributes(self,
File_System_Object_Attributes) |
source code
|
|
|
|
|
set_GUI_Object_Attributes(self,
GUI_Object_Attributes) |
source code
|
|
|
|
|
set_IPC_Object_Attributes(self,
IPC_Object_Attributes) |
source code
|
|
|
|
|
set_Internet_Object_Attributes(self,
Internet_Object_Attributes) |
source code
|
|
|
|
|
set_Module_Object_Attributes(self,
Module_Object_Attributes) |
source code
|
|
|
|
|
set_Registry_Object_Attributes(self,
Registry_Object_Attributes) |
source code
|
|
|
|
|
set_Process_Object_Attributes(self,
Process_Object_Attributes) |
source code
|
|
|
|
|
set_Memory_Object_Attributes(self,
Memory_Object_Attributes) |
source code
|
|
|
|
|
set_Network_Object_Attributes(self,
Network_Object_Attributes) |
source code
|
|
|
|
|
set_Daemon_Object_Attributes(self,
Daemon_Object_Attributes) |
source code
|
|
|
|
|
set_Custom_Object_Attributes(self,
Custom_Object_Attributes) |
source code
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
export(self,
outfile,
level,
namespace_=' maec: ' ,
name_=' ObjectType ' ,
namespacedef_='
' ) |
source code
|
|
|
exportAttributes(self,
outfile,
level,
already_processed,
namespace_=' maec: ' ,
name_=' ObjectType ' ) |
source code
|
|
|
exportChildren(self,
outfile,
level,
namespace_=' maec: ' ,
name_=' ObjectType ' ,
fromsubclass_=False) |
source code
|
|
|
|
|
exportLiteral(self,
outfile,
level,
name_=' ObjectType ' ) |
source code
|
|
|
exportLiteralAttributes(self,
outfile,
level,
already_processed,
name_) |
source code
|
|
|
exportLiteralChildren(self,
outfile,
level,
name_) |
source code
|
|
|
|
|
buildAttributes(self,
node,
attrs,
already_processed) |
source code
|
|
|
buildChildren(self,
child_,
node,
nodeName_,
fromsubclass_=False) |
source code
|
|
Inherited from GeneratedsSuper :
gds_build_any ,
gds_format_boolean ,
gds_format_boolean_list ,
gds_format_double ,
gds_format_double_list ,
gds_format_float ,
gds_format_float_list ,
gds_format_integer ,
gds_format_integer_list ,
gds_format_string ,
gds_str_lower ,
gds_validate_boolean ,
gds_validate_boolean_list ,
gds_validate_double ,
gds_validate_double_list ,
gds_validate_float ,
gds_validate_float_list ,
gds_validate_integer ,
gds_validate_integer_list ,
gds_validate_string ,
get_class_obj_ ,
get_path_ ,
get_path_list_
Inherited from object :
__delattr__ ,
__format__ ,
__getattribute__ ,
__hash__ ,
__new__ ,
__reduce__ ,
__reduce_ex__ ,
__repr__ ,
__setattr__ ,
__sizeof__ ,
__str__ ,
__subclasshook__
|