You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Shannon Entropy is a fundamental metric for measuring randomness in any file, not just Windows PE sections. The restriction of the entropy field to only the Windows PE Section Type in STIX 2.1 (section 6.7.6.3) seems like an arbitrary limitation
It seems more appropriate to move this field to be supported for directly under File and/or Artifact objects.
The text was updated successfully, but these errors were encountered:
Looking through Stix 2.1 documentation, it appears that only one section discusses a property of
entropy
which is located within aWindows™ PE Section Type
(See https://docs.oasis-open.org/cti/stix/v2.1/os/stix-v2.1-os.html#_ioapwyd8oimw)Shannon Entropy is a fundamental metric for measuring randomness in any file, not just Windows PE sections. The restriction of the entropy field to only the Windows PE Section Type in STIX 2.1 (section 6.7.6.3) seems like an arbitrary limitation
It seems more appropriate to move this field to be supported for directly under File and/or Artifact objects.
The text was updated successfully, but these errors were encountered: