Package lib :: Package maec :: Module maec11 :: Class ObjectType
[hide private]
[frames] | no frames]

Class ObjectType

source code

     object --+    
              |    
GeneratedsSuper --+
                  |
                 ObjectType

ObjectType is intended to serve as a method for the characterization of any entities that actions and behaviors operate on or are associated with.The object_name attribute specifies the name of the object, if applicable.The type attribute is intended to characterize the type of object being characterized in this element. Possible values are: URI, Host, Session, Session Token, Account, Device (physical), Handle, Heap,Memory Address, Memory Page, Window, Dialog, Parameter, Authentication Token,Encryption Token, Web Query, Protocol Header, Protocol Field, Link, SQL Query,Database, ACL, Role, System, VM, Signature, Channel, API Call, Environment Variable, Application, Network, Configuration, Policy, Tack, Malware, Message,Email Message, Media, Operating System, Query, Domain, Event, OtherThe permanent attribute is intended to characterize whether an object stays resident after execution of the malware, that is, whather or not it remains on the filesystem or other non-volatile entity in some fashion.

Instance Methods [hide private]
 
__init__(self, object_name=None, permanent=None, type_=None, id=None, Object_Size=None, Classifications=None, Associated_Code=None, Related_Objects=None, File_System_Object_Attributes=None, GUI_Object_Attributes=None, IPC_Object_Attributes=None, Internet_Object_Attributes=None, Module_Object_Attributes=None, Registry_Object_Attributes=None, Process_Object_Attributes=None, Memory_Object_Attributes=None, Network_Object_Attributes=None, Daemon_Object_Attributes=None, Custom_Object_Attributes=None)
x.__init__(...) initializes x; see help(type(x)) for signature
source code
 
get_Object_Size(self) source code
 
set_Object_Size(self, Object_Size) source code
 
get_Classifications(self) source code
 
set_Classifications(self, Classifications) source code
 
get_Associated_Code(self) source code
 
set_Associated_Code(self, Associated_Code) source code
 
get_Related_Objects(self) source code
 
set_Related_Objects(self, Related_Objects) source code
 
get_File_System_Object_Attributes(self) source code
 
set_File_System_Object_Attributes(self, File_System_Object_Attributes) source code
 
get_GUI_Object_Attributes(self) source code
 
set_GUI_Object_Attributes(self, GUI_Object_Attributes) source code
 
get_IPC_Object_Attributes(self) source code
 
set_IPC_Object_Attributes(self, IPC_Object_Attributes) source code
 
get_Internet_Object_Attributes(self) source code
 
set_Internet_Object_Attributes(self, Internet_Object_Attributes) source code
 
get_Module_Object_Attributes(self) source code
 
set_Module_Object_Attributes(self, Module_Object_Attributes) source code
 
get_Registry_Object_Attributes(self) source code
 
set_Registry_Object_Attributes(self, Registry_Object_Attributes) source code
 
get_Process_Object_Attributes(self) source code
 
set_Process_Object_Attributes(self, Process_Object_Attributes) source code
 
get_Memory_Object_Attributes(self) source code
 
set_Memory_Object_Attributes(self, Memory_Object_Attributes) source code
 
get_Network_Object_Attributes(self) source code
 
set_Network_Object_Attributes(self, Network_Object_Attributes) source code
 
get_Daemon_Object_Attributes(self) source code
 
set_Daemon_Object_Attributes(self, Daemon_Object_Attributes) source code
 
get_Custom_Object_Attributes(self) source code
 
set_Custom_Object_Attributes(self, Custom_Object_Attributes) source code
 
get_object_name(self) source code
 
set_object_name(self, object_name) source code
 
get_permanent(self) source code
 
set_permanent(self, permanent) source code
 
get_type(self) source code
 
set_type(self, type_) source code
 
get_id(self) source code
 
set_id(self, id) source code
 
export(self, outfile, level, namespace_='maec:', name_='ObjectType', namespacedef_='') source code
 
exportAttributes(self, outfile, level, already_processed, namespace_='maec:', name_='ObjectType') source code
 
exportChildren(self, outfile, level, namespace_='maec:', name_='ObjectType', fromsubclass_=False) source code
 
hasContent_(self) source code
 
exportLiteral(self, outfile, level, name_='ObjectType') source code
 
exportLiteralAttributes(self, outfile, level, already_processed, name_) source code
 
exportLiteralChildren(self, outfile, level, name_) source code
 
build(self, node) source code
 
buildAttributes(self, node, attrs, already_processed) source code
 
buildChildren(self, child_, node, nodeName_, fromsubclass_=False) source code

Inherited from GeneratedsSuper: gds_build_any, gds_format_boolean, gds_format_boolean_list, gds_format_double, gds_format_double_list, gds_format_float, gds_format_float_list, gds_format_integer, gds_format_integer_list, gds_format_string, gds_str_lower, gds_validate_boolean, gds_validate_boolean_list, gds_validate_double, gds_validate_double_list, gds_validate_float, gds_validate_float_list, gds_validate_integer, gds_validate_integer_list, gds_validate_string, get_class_obj_, get_path_, get_path_list_

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Static Methods [hide private]
 
factory(*args_, **kwargs_) source code
Class Variables [hide private]
  subclass = None
hash(x)
  superclass = None
hash(x)

Inherited from GeneratedsSuper: Tag_strip_pattern_

Properties [hide private]

Inherited from object: __class__

Method Details [hide private]

__init__(self, object_name=None, permanent=None, type_=None, id=None, Object_Size=None, Classifications=None, Associated_Code=None, Related_Objects=None, File_System_Object_Attributes=None, GUI_Object_Attributes=None, IPC_Object_Attributes=None, Internet_Object_Attributes=None, Module_Object_Attributes=None, Registry_Object_Attributes=None, Process_Object_Attributes=None, Memory_Object_Attributes=None, Network_Object_Attributes=None, Daemon_Object_Attributes=None, Custom_Object_Attributes=None)
(Constructor)

source code 

x.__init__(...) initializes x; see help(type(x)) for signature

Overrides: object.__init__
(inherited documentation)