In the world of threat intelligence, there are many different models or approaches to order, classify or describe threat actors, threats or activity groups. We welcome new ways of describing threat intelligence
as the galaxy model allows to reuse the ones you use or trust for your organization or community.
Fork the project, update or create elements or clusters and make a pull-request.
We recommend to validate the JSON file using [jq](https://stedolan.github.io/jq/) and [validate_all.sh](https://github.com/MISP/misp-galaxy/blob/master/validate_all.sh) before doing a pull-request.
### Dependencies for testing your contributions
To create your own Galaxies the following tools are needed to run the validation scripts.
- jsonschema (>v2.4)
- moreutils (sponge)
On a Debian flavoured distribution you can potentially do this: