From e215a0ff1a15d4cc36a88642acf4893c60125cc0 Mon Sep 17 00:00:00 2001 From: Christian Studer Date: Fri, 7 Jul 2023 11:36:42 +0200 Subject: [PATCH] add: [incident] Added the score attribute - We will probably parse scores and build the attribute value the following way: "{name} - {description}: {score}" --- objects/incident/definition.json | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/objects/incident/definition.json b/objects/incident/definition.json index 0824509..ddfe798 100644 --- a/objects/incident/definition.json +++ b/objects/incident/definition.json @@ -169,6 +169,12 @@ "supplemented" ], "ui-priority": 0 + }, + "score": { + "description": "Incident score, with a name, an optional description and the numeric score value.", + "misp-attribute": "text", + "multiple": true, + "ui-priority": 0 } }, "description": "Incident object template as described in STIX 2.1 Incident object and its core extension.",