misp-rfc/README.md

# MISP standards

This repository is the official source of the specification and formats used in the MISP project.

The formats are described to support other implementations which reuse the format and ensuring an interoperability
with existing MISP software and other Threat Intelligence Platforms.

All the formats can be freely reused by everyone.

## MISP Formats in use and implemented in multiple software

* [misp-core-format](misp-core-format/raw.md.txt) ([markdown source](misp-core-format/raw.md)) which describes the core JSON format of MISP. Current Internet-Draft: [03](https://tools.ietf.org/html/draft-dulaunoy-misp-core-format)
* [misp-taxonomy-format](misp-taxonomy-format/raw.md.txt) ([markdown source](misp-taxonomy-format/raw.md)) which describes the taxonomy JSON format of MISP. Current Internet-Draft: [04](https://tools.ietf.org/html/draft-dulaunoy-misp-taxonomy-format)
* [misp-galaxy-format](misp-galaxy-format/raw.md.txt) which describes the [galaxy](https://github.com/MISP/misp-galaxy) template format used to expand the threat actor modelling of MISP. Current Internet-Draft: [00](https://datatracker.ietf.org/doc/draft-dulaunoy-misp-galaxy-format/)
* [misp-object-template-format](misp-object-template-format/raw.md.txt) which describes the [object](https://github.com/MISP/misp-objects) template format to add combinedand composite object to the MISP core format. Current Internet-Draft: [00](https://datatracker.ietf.org/doc/draft-dulaunoy-misp-object-template-format/)

## MISP Format in design phase and implemented in at least one software prototype

* misp-modules-protocol which describes the [misp-modules](https://github.com/MISP/misp-modules) protocol used between MISP and misp-modules.

## MISP Format in design phase

* misp-collaborative-voting-format which describes the collaborative voting and scoring format for the feeds providers.

## Sample files

If you want to see how a threat intelligence can be easily expressed in MISP standard, the following resources might give you some ideas:

* [CIRCL OSINT MISP Feed](https://www.circl.lu/doc/misp/feed-osint/)

[Installing MISP](https://www.misp-project.org/download/) is also another option to see the MISP standards in action. The MISP standards are actively used in the MISP threat intelligence platform to support the complete chain from intelligence creation, sharing, distribution and synchronisation.

# Contribution

If you want to contribute to the MISP specifications, feel free to [open an issue](https://github.com/MISP/misp-rfc/issues).
MISP standards 2017-09-22 14:53:17 +02:00			`# MISP standards`
Initial skeleton for the MISP core format Internet-Draft 2016-10-01 12:18:59 +02:00
RFC index update 2017-09-22 11:44:22 +02:00			`This repository is the official source of the specification and formats used in the MISP project.`
Initial skeleton for the MISP core format Internet-Draft 2016-10-01 12:18:59 +02:00
RFC index update 2017-09-22 11:44:22 +02:00			`The formats are described to support other implementations which reuse the format and ensuring an interoperability`
			`with existing MISP software and other Threat Intelligence Platforms.`

			`All the formats can be freely reused by everyone.`

			`## MISP Formats in use and implemented in multiple software`
Status updated 2016-10-16 17:10:23 +02:00
MISP core version 3 released 2018-02-09 15:37:42 +01:00			`* [misp-core-format](misp-core-format/raw.md.txt) ([markdown source](misp-core-format/raw.md)) which describes the core JSON format of MISP. Current Internet-Draft: [03](https://tools.ietf.org/html/draft-dulaunoy-misp-core-format)`
Taxonomy updated version published (04) 2017-11-29 08:40:15 +01:00			`* [misp-taxonomy-format](misp-taxonomy-format/raw.md.txt) ([markdown source](misp-taxonomy-format/raw.md)) which describes the taxonomy JSON format of MISP. Current Internet-Draft: [04](https://tools.ietf.org/html/draft-dulaunoy-misp-taxonomy-format)`
IETF I-D updated 2017-09-22 17:11:47 +02:00			`* [misp-galaxy-format](misp-galaxy-format/raw.md.txt) which describes the [galaxy](https://github.com/MISP/misp-galaxy) template format used to expand the threat actor modelling of MISP. Current Internet-Draft: [00](https://datatracker.ietf.org/doc/draft-dulaunoy-misp-galaxy-format/)`
			`* [misp-object-template-format](misp-object-template-format/raw.md.txt) which describes the [object](https://github.com/MISP/misp-objects) template format to add combinedand composite object to the MISP core format. Current Internet-Draft: [00](https://datatracker.ietf.org/doc/draft-dulaunoy-misp-object-template-format/)`
Status updated 2016-10-16 17:10:23 +02:00
Standards within the MISP project 2016-10-16 17:18:45 +02:00			`## MISP Format in design phase and implemented in at least one software prototype`

			`* misp-modules-protocol which describes the [misp-modules](https://github.com/MISP/misp-modules) protocol used between MISP and misp-modules.`

			`## MISP Format in design phase`

			`* misp-collaborative-voting-format which describes the collaborative voting and scoring format for the feeds providers.`
Status updated 2016-10-16 17:10:23 +02:00
fix: Where to find sample MISP files 2018-01-14 18:14:24 +01:00			`## Sample files`

			`If you want to see how a threat intelligence can be easily expressed in MISP standard, the following resources might give you some ideas:`

			`* [CIRCL OSINT MISP Feed](https://www.circl.lu/doc/misp/feed-osint/)`

			`[Installing MISP](https://www.misp-project.org/download/) is also another option to see the MISP standards in action. The MISP standards are actively used in the MISP threat intelligence platform to support the complete chain from intelligence creation, sharing, distribution and synchronisation.`

Contribution section added 2016-10-16 17:32:16 +02:00			`# Contribution`

			`If you want to contribute to the MISP specifications, feel free to [open an issue](https://github.com/MISP/misp-rfc/issues).`