Merge pull request #1046 from shellcromancer/file_extension

feat: adds `ext` attribute to `File` object
ocsf · Apr 25, 2024 · c4c772e · c4c772e
2 parents e093f0c + 772beb2
commit c4c772e
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -53,6 +53,8 @@ Thankyou! -->
     2. Added entries to `injection_type_id` enum (`Process Activity`) and `activity_id` enum (`Memory Activity`). #1060
 * #### Profiles
 * #### Objects
+    1.  Added `ext` to `File` object. #1046
+
 * #### Platform Extensions
 
 ### Bugfixes

diff --git a/dictionary.json b/dictionary.json
@@ -1636,6 +1636,11 @@
       "description": "The expiration time. See specific usage.",
       "type": "timestamp_t"
     },
+    "ext": {
+      "caption": "Extension",
+      "description": "The extension. See specific usage.",
+      "type": "string_t"
+    },
     "extension": {
       "@deprecated": {
         "message": "Use the <code> extensions </code> attribute instead.",

diff --git a/objects/file.json b/objects/file.json
@@ -41,6 +41,11 @@
       "description": "The description of the file, as returned by file system. For example: the description as returned by the Unix file command or the Windows file type.",
       "requirement": "optional"
     },
+    "ext": {
+      "caption": "File Extension",
+      "description": "The extension of the file, excluding the leading dot. For example: <code>exe</code> from <code>svchost.exe</code>, or <code>gz</code> from <code>export.tar.gz</code>.",
+      "requirement": "recommended"
+    },
     "hashes": {
       "requirement": "recommended"
     },