MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

Version 1.0 of MISP XML Document Type Definition. 

The first version of the XML format is loosely based on the current XML
format used by MISP in commit 84b552fb74.

The purpose is to track down the changes in the format and especially
to ensure a consistent definition of the XML format for external tools
and software using the MISP XML format.
pull/217/head
Alexandre Dulaunoy 2013-07-29 11:37:09 +02:00
parent 07c7e8fadf
commit de6fc6f6ae
1 changed files with 54 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

54
INSTALL/format/misp_xml_format.dtd Normal file
View File

@ -0,0 +1,54 @@
<!-- ............................................................... -->
<!-- MISP Malware Information Sharing Platform ..................... -->
<!-- XML DTD for MISP XML .......................................... -->
<!-- ............................................................... -->
<!-- version 1.0 - commit 84b552fb7441bf2beb0c711acde3b0af336afba8 . -->
<!-- ............................................................... -->
<!ELEMENT Attribute ( id?, type?, category?, to_ids?, uuid?, event_id?, distribution?, value?, ShadowAttribute? ) >
<!ELEMENT Event ( Attribute | RelatedEvent | ShadowAttribute | analysis | attribute_count | date | distribution | id | info | org | orgc | proposal_email_lock | published | risk | timestamp | user_id | uuid )* >
<!ELEMENT RelatedEvent ( Event? ) >
<!ELEMENT ShadowAttribute EMPTY >
<!ELEMENT analysis ( #PCDATA ) >
<!ELEMENT attribute_count ( #PCDATA ) >
<!ELEMENT category ( #PCDATA ) >
<!ELEMENT date ( #PCDATA ) >
<!ELEMENT distribution ( #PCDATA ) >
<!ELEMENT event_id ( #PCDATA ) >
<!ELEMENT id ( #PCDATA ) >
<!ELEMENT info ( #PCDATA ) >
<!ELEMENT org ( #PCDATA ) >
<!ELEMENT orgc ( #PCDATA ) >
<!ELEMENT proposal_email_lock ( #PCDATA ) >
<!ELEMENT published ( #PCDATA ) >
<!ELEMENT response ( Event+ ) >
<!ELEMENT risk ( #PCDATA ) >
<!ELEMENT timestamp ( #PCDATA ) >
<!ELEMENT to_ids ( #PCDATA ) >
<!ELEMENT type ( #PCDATA ) >
<!ELEMENT user_id ( #PCDATA ) >
<!ELEMENT uuid ( #PCDATA ) >
<!ELEMENT value ( #PCDATA ) >