MISP
/
misp-book
mirror of https://github.com/MISP/misp-book
2
0
Fork 0
Code Issues Releases Wiki Activity

formatting

pull/63/head
Deborah Servili 2017-09-25 10:25:34 +02:00
parent 04a00cad56
commit 7c9532774b
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
using-the-system/README.md
View File

@ -60,18 +60,18 @@ Keep in mind that the system searches for regular expressions in the value field
MISP objects to be used in MISP (2.4.80) system and can be used by other information sharing tool. MISP objects are in addition to MISP attributes to allow advanced combinations of attributes. The creation of these objects and their associated attributes are based on real cyber security use-cases and existing practices in information sharing. MISP objects to be used in MISP (2.4.80) system and can be used by other information sharing tool. MISP objects are in addition to MISP attributes to allow advanced combinations of attributes. The creation of these objects and their associated attributes are based on real cyber security use-cases and existing practices in information sharing.
Objects can be added by using the side menu: Objects can be added by using the side menu:
![This menu allows you to add objects.](figures/add_object.png) ![This menu allows you to add objects.](figures/add_object.png)
This will open a popup where you can choose the type of object: This will open a popup where you can choose the type of object:
![Object Popup](figures/select_obj_cat.png) ![Object Popup](figures/select_obj_cat.png)
![Object Popup All](figures/select_object.png) ![Object Popup All](figures/select_object.png)
For this example we will try to add an ip|port object: For this example we will try to add an ip|port object:
![ip|port form](figures/object_ipport.png) ![ip|port form](figures/object_ipport.png)
For some objects, there might be attributes that required to be set. For instance in this object, there is a required attribute, "Ip", and it is also required to set one of the attributes between "dst-port" and "src-port". If these requirements are not met, the object will not be valid and therefore not added to the event. Also you can't add an object without setting any attribute. For some objects, there might be attributes that required to be set. For instance in this object, there is a required attribute, "Ip", and it is also required to set one of the attributes between "dst-port" and "src-port". If these requirements are not met, the object will not be valid and therefore not added to the event. Also you can't add an object without setting any attribute.
After pressing "Submit, yYou are given the possibility to review your object before saving it. After pressing "Submit, yYou are given the possibility to review your object before saving it.
![object preview](figures/object_preview.png) ![object preview](figures/object_preview.png)