DOC: addition of malware.hash.* fields

Signed-off-by: Sebastian Wagner <[email protected]>
certtools · Feb 14, 2017 · f676c92 · f676c92
1 parent 5aa570d
commit f676c92
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -100,6 +100,7 @@ v1.0 (in development, master branch)
 - `additional_information` renamed to `extra`, must be JSON
 - `os.name`, `os.version`, `user_agent` removed in favor of `extra`
 - all hashes are lower case only
+- added `malware.hash.(md5|sha1)`
 - New parameter and field named feed.accuracy to represent the accuracy of each feed
 - New parameter and field named feed.provider to document the name of the source of each feed
 - New parameter and field named feed.documentation to link to documentation of the feed

diff --git a/NEWS.md b/NEWS.md
@@ -19,6 +19,8 @@ ALTER TABLE events
  ADD COLUMN "feed.accuracy" text,
  ADD COLUMN "feed.documentation" text,
  ADD COLUMN "feed.provider" text,
+ ADD COLUMN "malware.hash.md5" text,
+ ADD COLUMN "malware.hash.sha1" text,
  ADD COLUMN "protocol.transport" text,
  RENAME COLUMN "additional_information" TO "extra",
  RENAME COLUMN "misp_id" TO "misp.event_uuid",