From 081b8fffedc4bea40bcdfdd67b5d05f9e592dca2 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Tue, 11 Oct 2016 18:25:32 +0200 Subject: [PATCH] RelatedAttributes added --- misp-core-format/raw.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/misp-core-format/raw.md b/misp-core-format/raw.md index d4acf27..f3f1822 100644 --- a/misp-core-format/raw.md +++ b/misp-core-format/raw.md @@ -269,7 +269,8 @@ A MISP document **MUST** at least includes category-type-value triplet described "deleted": false, "value": "Hello world", "SharingGroup": [], - "ShadowAttribute": [] + "ShadowAttribute": [], + "RelatedAttribute": [] } ~~~~ @@ -401,6 +402,10 @@ deleted represents a setting that allows attributes to be revoked. Revoked attri deleted is represented by a JSON boolean. deleted **MUST** be present. +#### RelatedAttribute + +RelatedAttribute is an array of attributes correlating with the current attribute. Each element in the array represents an JSON object which contains an Attribute dictionnary with the external attributes correlating. Each Attribute **MUST** include the id, org_id, info and a value. Only the correlations found on the local instance are shown in RelatedAttribute. + #### value value represents the payload of an attribute. The format of the value is dependent on the type of the attribute.