STIX 2.1

Signed-off-by: DerekRushton <[email protected]>
opencybersecurityalliance · Aug 22, 2024 · 5827692 · 5827692
1 parent 4e8f69b
commit 5827692
Showing 1 changed file with 17 additions and 17 deletions.
diff --git a/stix_shifter_modules/crowdstrike_alerts/stix_translation/json/stix_2_1/to_stix_map.json b/stix_shifter_modules/crowdstrike_alerts/stix_translation/json/stix_2_1/to_stix_map.json
@@ -287,7 +287,7 @@
       "object": "process_object"
     },
     {
-      "key": "process.binary_ref",
+      "key": "process.image_ref",
       "object": "process_object",
       "references": "file_object"
     },
@@ -334,7 +334,7 @@
         "object": "grandparent_process_object"
       },
       {
-        "key": "process.binary_ref",
+        "key": "process.image_ref",
         "object": "grandparent_process_object",
         "references": "grandparent_file_object"
       }
@@ -372,15 +372,15 @@
     },
     "timestamp": [
       {
-        "key": "file.accessed",
+        "key": "file.atime",
         "object": "grandparent_file_object"
       },
       {
         "key": "process.created",
         "object": "grandparent_process_object"
       },
       {
-        "key": "directory.accessed",
+        "key": "directory.atime",
         "object": "grandparent_directory_object"
       }
     ],
@@ -466,7 +466,7 @@
         "object": "parent_process_object"
       },
       {
-        "key": "process.binary_ref",
+        "key": "process.image_ref",
         "object": "parent_process_object",
         "references": "parent_file_object"
       }
@@ -504,15 +504,15 @@
     },
     "timestamp": [
       {
-        "key": "file.accessed",
+        "key": "file.atime",
         "object": "parent_file_object"
       },
       {
         "key": "process.created",
         "object": "parent_process_object"
       },
       {
-        "key": "directory.accessed",
+        "key": "directory.atime",
         "object": "parent_directory_object"
       }
     ],
@@ -725,15 +725,15 @@
   },
   "timestamp": [
     {
-      "key": "file.accessed",
+      "key": "file.atime",
       "object": "file_object"
     },
     {
       "key": "process.created",
       "object": "process_object"
     },
     {
-      "key": "directory.accessed",
+      "key": "directory.atime",
       "object": "directory_object"
     }
   ],
@@ -1028,11 +1028,11 @@
     ],
     "timestamp": [
       {
-        "key": "file.accessed",
+        "key": "file.atime",
         "object": "document_file_object"
       },
       {
-        "key": "directory.accessed",
+        "key": "directory.atime",
         "object": "document_directory_object"
       }
     ],
@@ -1063,11 +1063,11 @@
     ],
     "timestamp": [
       {
-        "key": "file.accessed",
+        "key": "file.atime",
         "object": "document_file_object"
       },
       {
-        "key": "directory.accessed",
+        "key": "directory.atime",
         "object": "document_directory_object"
       }
     ],
@@ -1098,11 +1098,11 @@
     ],
     "timestamp": [
       {
-        "key": "file.accessed",
+        "key": "file.atime",
         "object": "document_file_object"
       },
       {
-        "key": "directory.accessed",
+        "key": "directory.atime",
         "object": "document_directory_object"
       }
     ],
@@ -1133,11 +1133,11 @@
     ],
     "timestamp": [
       {
-        "key": "file.accessed",
+        "key": "file.atime",
         "object": "document_file_object"
       },
       {
-        "key": "directory.accessed",
+        "key": "directory.atime",
         "object": "document_directory_object"
       }
     ],