mirror of https://github.com/MISP/misp-objects
Alexandre Dulaunoy
0c98a925f3
The idea is to separate the evidences from the case itself as you can have multiple acquisitions for a specific case. Another object template is required such as [forensic-evidence] to be able to link between the forensic-case object and one or more evidences. |
||
---|---|---|
.. | ||
definition.json |