From a1735c3f016bcd441471425617807e05e4d27928 Mon Sep 17 00:00:00 2001 From: Sascha Rommelfangen Date: Wed, 24 Oct 2018 11:40:16 +0200 Subject: [PATCH] correction run --- best-practices/what-to-share.adoc | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/best-practices/what-to-share.adoc b/best-practices/what-to-share.adoc index ab4f176..a681be1 100644 --- a/best-practices/what-to-share.adoc +++ b/best-practices/what-to-share.adoc @@ -4,15 +4,15 @@ NOTE: Valuable information is a moving concept and highly depending of the goal Contribution comes in various shapes and sizes. -Information which are often distributed within sharing communities are the following: +Information which is often distributed within sharing communities are the following: -- Analysis report of a specific threat (such as security vendor report, blog post) which can be open source intelligence or limited distribution +- Analysis report of a specific threat (such as security vendor report, blog post) which can be Open Source intelligence or come as limited distribution - Enhanced analysis of an existing report (such as data qualification, competitive or counter analysis) - A post-mortem analysis of an incident - Additional information about existing or known threats (such as adversary techniques, new malware samples or complementary discoveries) - False-positive or false-negative reporting - Asking for contribution or support from the community (such as "have you seen this threat?" or "do you have more samples?") -TIP: By having a look at https://www.misp-project.org/objects.html[the object templates] or the https://www.misp-project.org/datamodels/#misp-core-format[MISP attribute types], this can help you to discover what it's actively shared within other communities. If a type or an object template is not matching your data model, you can easily create new ones. +TIP: By having a look at https://www.misp-project.org/objects.html[the object templates] or the https://www.misp-project.org/datamodels/#misp-core-format[MISP attribute types], this can help you to discover what is actively shared within other communities. If a type or an object template is not matching your data model, you can easily create new ones. TIP: When asking for the support of the community, using a specific taxonomy such as https://www.misp-project.org/taxonomies.html#_collaborative_intelligence[collaborative intelligence] to express your needs might help everyone and improve automation.