MISP
/
misp-rfc
mirror of https://github.com/MISP/misp-rfc
2
0
Fork 0
Code Issues Releases Wiki Activity
misp-rfc/README.md

37 lines
2.5 KiB
Markdown
Raw Normal View History

chg: [misp-rfc] new version of the taxonomy-format RFC published
2018-12-01 11:03:54 +01:00
# MISP standards and RFCs
Initial skeleton for the MISP core format Internet-Draft
2016-10-01 12:18:59 +02:00
RFC index update
2017-09-22 11:44:22 +02:00
This repository is the official source of the specification and formats used in the MISP project.
Initial skeleton for the MISP core format Internet-Draft
2016-10-01 12:18:59 +02:00
RFC index update
2017-09-22 11:44:22 +02:00
The formats are described to support other implementations which reuse the format and ensuring an interoperability
chg: [misp-rfc] new version of the taxonomy-format RFC published
2018-12-01 11:03:54 +01:00
with existing MISP software, other Threat Intelligence Platforms and security tools at large.
RFC index update
2017-09-22 11:44:22 +02:00
All the formats can be freely reused by everyone.
## MISP Formats in use and implemented in multiple software
Status updated
2016-10-16 17:10:23 +02:00
chg: [core] new ID for misp-core
2018-12-30 17:23:14 +01:00
* [misp-core-format](misp-core-format/raw.md.txt) ([markdown source](misp-core-format/raw.md)) which describes the core JSON format of MISP. Current Internet-Draft: [06](https://tools.ietf.org/html/draft-dulaunoy-misp-core-format)
chg: [misp-rfc] new version of the taxonomy-format RFC published
2018-12-01 11:03:54 +01:00
* [misp-taxonomy-format](misp-taxonomy-format/raw.md.txt) ([markdown source](misp-taxonomy-format/raw.md)) which describes the taxonomy JSON format of MISP. Current Internet-Draft: [06](https://tools.ietf.org/html/draft-dulaunoy-misp-taxonomy-format)
chg: [misp-galaxy] Internet-Draft published as 05
2018-09-27 09:06:36 +02:00
* [misp-galaxy-format](misp-galaxy-format/raw.md.txt) which describes the [galaxy](https://github.com/MISP/misp-galaxy) template format used to expand the threat actor modelling of MISP. Current Internet-Draft: [05](https://datatracker.ietf.org/doc/draft-dulaunoy-misp-galaxy-format/)
add new version of Internet-Draft for MISP object template
2018-04-10 22:00:34 +02:00
* [misp-object-template-format](misp-object-template-format/raw.md.txt) which describes the [object](https://github.com/MISP/misp-objects) template format to add combinedand composite object to the MISP core format. Current Internet-Draft: [01](https://datatracker.ietf.org/doc/draft-dulaunoy-misp-object-template-format/)
Status updated
2016-10-16 17:10:23 +02:00
Standards within the MISP project
2016-10-16 17:18:45 +02:00
## MISP Format in design phase and implemented in at least one software prototype
* misp-modules-protocol which describes the [misp-modules](https://github.com/MISP/misp-modules) protocol used between MISP and misp-modules.
## MISP Format in design phase
* misp-collaborative-voting-format which describes the collaborative voting and scoring format for the feeds providers.
Status updated
2016-10-16 17:10:23 +02:00
fix: Where to find sample MISP files
2018-01-14 18:14:24 +01:00
## Sample files
If you want to see how a threat intelligence can be easily expressed in MISP standard, the following resources might give you some ideas:
* [CIRCL OSINT MISP Feed](https://www.circl.lu/doc/misp/feed-osint/)
[Installing MISP](https://www.misp-project.org/download/) is also another option to see the MISP standards in action. The MISP standards are actively used in the MISP threat intelligence platform to support the complete chain from intelligence creation, sharing, distribution and synchronisation.
Contribution section added
2016-10-16 17:32:16 +02:00
# Contribution
If you want to contribute to the MISP specifications, feel free to [open an issue](https://github.com/MISP/misp-rfc/issues).