hunters-forge-OSSEM/docs/cdm/entities/module.md

module

Event fields used to define/normalize metadata about modules loaded into a process. A process module represents a .dll or .exe file that is loaded into a particular process.

Attributes

Name	Type	Description	Sample Value
module_is_signed	boolean	is the module loaded signed?	TRUE
module_name	string	name of the modules loaded into a process without the full path	msvcrt.dll
module_path	string	full path of a module loaded into a process	C:\Windows\System32\msvcrt.dll
module_signature	string	The signer	Microsoft Corporation
module_signature_status	string	status of the signature	Valid