STIX Malware Types

Details

ID	`indicator_stixmalwaretypes`
CLI Name	`stixmalwaretypes`
Type	multiSelect
From Version	5.5.0
Required	No
Read Only	No
Searchable	Yes
Case Insensitive	Yes
Expiration (hours)	72

Select Values

adware backdoor bot bootkit ddos downloader dropper exploit-kit keylogger ransomware remote-access-trojan resource-exploitation rogue-security-software rootkit screen-capture spyware trojan unknown virus webshell wiper worm

Associated Indicator Types

STIX Malware

Source

indicatorfield-STIX_Malware_Types.json

Download History Raw

{
    "associatedToAll": false,
    "associatedTypes": [
        "STIX Malware"
    ],
    "breachScript": "",
    "caseInsensitive": true,
    "cliName": "stixmalwaretypes",
    "closeForm": false,
    "columns": null,
    "content": true,
    "defaultRows": null,
    "description": "",
    "editForm": true,
    "fieldCalcScript": "",
    "group": 2,
    "hidden": false,
    "id": "indicator_stixmalwaretypes",
    "isReadOnly": false,
    "itemVersion": "",
    "locked": false,
    "name": "STIX Malware Types",
    "neverSetAsRequired": false,
    "ownerOnly": false,
    "placeholder": "",
    "propagationLabels": [
        "all"
    ],
    "required": false,
    "script": "",
    "selectValues": [
        "adware",
        "backdoor",
        "bot",
        "bootkit",
        "ddos",
        "downloader",
        "dropper",
        "exploit-kit",
        "keylogger",
        "ransomware",
        "remote-access-trojan",
        "resource-exploitation",
        "rogue-security-software",
        "rootkit",
        "screen-capture",
        "spyware",
        "trojan",
        "unknown",
        "virus",
        "webshell",
        "wiper",
        "worm"
    ],
    "sla": 0,
    "system": false,
    "systemAssociatedTypes": null,
    "threshold": 72,
    "type": "multiSelect",
    "unmapped": false,
    "unsearchable": false,
    "useAsKpi": false,
    "validationRegex": "",
    "fromVersion": "5.5.0",
    "version": -1,
    "supportedModules": [
        "agentix",
        "xsiam"
    ]
}