Skip to content

Commit e9e32b3

Browse files
authored
Merge pull request #94 from CybercentreCanada/AL-4137
Add more dynamic process tags
2 parents a0282a3 + aaf98b8 commit e9e32b3

1 file changed

Lines changed: 4 additions & 1 deletion

File tree

assemblyline-models/src/datastore/tagging.rs

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -187,7 +187,7 @@ impl TagInformation {
187187
// MARK: Tag List
188188
/// The list of all tags we are willing to accept.
189189
/// This includes their path within a tagging dict, a textual description and how they should be processed for validation or normalization
190-
static ALL_VALID_TAGS: [TagInformation; 211] = [
190+
static ALL_VALID_TAGS: [TagInformation; 214] = [
191191
TagInformation::new(&["attribution", "actor"], "Attribution Actor", TagProcessor::Uppercase),
192192
TagInformation::new(&["attribution", "campaign"], "Attribution Campaign", TagProcessor::Uppercase),
193193
TagInformation::new(&["attribution", "category"], "Attribution Category", TagProcessor::Uppercase),
@@ -220,6 +220,9 @@ static ALL_VALID_TAGS: [TagInformation; 211] = [
220220
TagInformation::new(&["dynamic", "registry_key"], "Registy Keys", TagProcessor::String),
221221
TagInformation::new(&["dynamic", "process", "command_line"], "Commandline", TagProcessor::String),
222222
TagInformation::new(&["dynamic", "process", "file_name"], "Filename", TagProcessor::String),
223+
TagInformation::new(&["dynamic", "process", "file_path"], "Filepath", TagProcessor::String),
224+
TagInformation::new(&["dynamic", "process", "module_name"], "Module name", TagProcessor::String),
225+
TagInformation::new(&["dynamic", "process", "module_path"], "Module path", TagProcessor::String),
223226
TagInformation::new(&["dynamic", "process", "shortcut"], "Shortcut", TagProcessor::String),
224227
TagInformation::new(&["dynamic", "signature", "category"], "Signature Category", TagProcessor::String),
225228
TagInformation::new(&["dynamic", "signature", "family"], "Signature Family", TagProcessor::String),

0 commit comments

Comments
 (0)