mitre-attack / car

Cyber Analytics Repository

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

`signer` used twice as field name in Module data model

mark-jensen opened this issue · comments

Proposed Change

Fix name of field for thread ID in Module.yaml

Justification

- name: signer
description: The name of the organization which signed the module.
example: Microsoft Corporation
- name: signer
description: The thread ID of the thread responsible for the load or unload event.
example: 50

Also, is the description correct? It is copied from Service data model.

description: Services, or a service application, can be started automatically at system boot, by a user through the services control panel applet, or by an application that uses service functions. Services can execute even when no user is logged into the system.

description: Services, or a service application, can be started automatically at system boot, by a user through the services control panel applet, or by an application that uses service functions. Services can execute even when no user is logged into the system.

@mark-jensen good eye, thanks! This has been fixed in f35299b.