mirror of https://github.com/MISP/misp-book
update taxonomies guide (add highlighted & required
parent
65945a3d37
commit
7c9ca22618
|
@ -216,6 +216,36 @@ Tags can be used to:
|
|||
|
||||
* Enrich IDS export with tags to fit your NIDS deployment.
|
||||
|
||||
## More options to configure taxonomies.
|
||||
|
||||
For MISP users and organisations, it's important to show the important contextualised information and especially the taxonomies which are important to your use-case.
|
||||
Once a taxonomy is enabled and available for use in MISP, there are two more options a admin can be set to encourage the use of particular taxonomies. Both are found in Event Actions > List Taxonomies menu.
|
||||
|
||||
![taxonomies-list](./figures/taxonomy-list.png)
|
||||
|
||||
### Setting a taxonomy as "Highlighted"
|
||||
|
||||
If a taxonomy is highlighted, its namespace will appear in a visible box, even if it is not set in the event.
|
||||
|
||||
![highlight-event](./figures/highlight-event.png)
|
||||
|
||||
Tags are also hilighted in the event list.
|
||||
|
||||
![highlight-list-event](./figures/highlight-list-event.png)
|
||||
|
||||
It is also easier to add an highlighted tag to an event.
|
||||
|
||||
![tag-box](./figures/tag-box.png)
|
||||
|
||||
### Setting a taxonomy as "Required"
|
||||
If taxonomies are set as required, a message will be visible on the tag list of the event, enumerating the missing required taxonomies still missing.
|
||||
|
||||
![missing-taxo](./figures/missing-taxo.png)
|
||||
|
||||
An event will not be published if it is not tagged with at least one of tag of each required taxonomy.
|
||||
|
||||
![publishing-without-required](./figures/publishing-without-required.png)
|
||||
|
||||
## Future functionalities related to MISP taxonomies
|
||||
|
||||
- Sighting support (thanks to NCSC-NL) is integrated in MISP allowing to auto expire IOC based on user detection.
|
||||
|
|
Binary file not shown.
After Width: | Height: | Size: 25 KiB |
Binary file not shown.
After Width: | Height: | Size: 29 KiB |
Binary file not shown.
After Width: | Height: | Size: 9.0 KiB |
Binary file not shown.
After Width: | Height: | Size: 6.4 KiB |
Binary file not shown.
After Width: | Height: | Size: 43 KiB |
Binary file not shown.
After Width: | Height: | Size: 267 KiB |
Loading…
Reference in New Issue