From eafb54fd0738aedb56323da67377f083d1a1e211 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Mon, 8 Jan 2018 11:28:11 +0100
Subject: [PATCH] add: An annotation object allowing analysts to add
 annotations, comments, executive summary to a MISP event, objects or
 attributes.

---
 objects/annotation/definition.json | 71 ++++++++++++++++++++++++++++++
 1 file changed, 71 insertions(+)
 create mode 100644 objects/annotation/definition.json

diff --git a/objects/annotation/definition.json b/objects/annotation/definition.json
new file mode 100644
index 0000000..9b5ab81
--- /dev/null
+++ b/objects/annotation/definition.json
@@ -0,0 +1,71 @@
+{
+  "requiredOneOf": [
+    "post"
+  ],
+  "attributes": {
+    "text": {
+      "description": "Raw text of the annotation",
+      "ui-priority": 0,
+      "misp-attribute": "text"
+    },
+    "ref": {
+      "description": "Reference(s) to the annotation",
+      "ui-priority": 0,
+      "misp-attribute": "link",
+      "multiple": true
+    },
+    "type": {
+      "description": "Type of the annotation",
+      "ui-priority": 0,
+      "misp-attribute": "text",
+      "disable_correlation": true,
+      "sane_default": [
+        "Annotation",
+        "Executive Summary",
+        "Introduction",
+        "Conclusion",
+        "Disclaimer",
+        "Keywords",
+        "Acknowledgement",
+        "Other",
+        "Copyright",
+        "Authors",
+        "Logo"
+      ]
+    },
+    "format": {
+      "description": "Format of the annotation",
+      "ui-priority": 0,
+      "misp-attribute": "text",
+      "disable_correlation": true,
+      "sane_default": [
+        "text",
+        "markdown",
+        "asciidoctor",
+        "MultiMarkdown",
+        "GFM",
+        "pandoc",
+        "Fountain",
+        "CommonWork",
+        "kramdown-rfc2629",
+        "rfc7328",
+        "Extra"
+      ]
+    },
+    "creation-date": {
+      "description": "Initial creation of the annotation",
+      "ui-priority": 0,
+      "misp-attribute": "datetime"
+    },
+    "modification-date": {
+      "description": "Last update of the annotation",
+      "ui-priority": 0,
+      "misp-attribute": "datetime"
+    }
+  },
+  "version": 1,
+  "description": "An annotation object allowing analysts to add annotations, comments, executive summary to a MISP event, objects or attributes.",
+  "meta-category": "misc",
+  "uuid": "5d8dc046-15a1-4ca3-a09f-ed4ede7c4487",
+  "name": "annotation"
+}