MISP
/
misp-rfc
mirror of https://github.com/MISP/misp-rfc
2
0
Fork 0
Code Issues Releases Wiki Activity

RelatedAttributes added

pull/6/head
Alexandre Dulaunoy 2016-10-11 18:25:32 +02:00
parent f97a0507ae
commit 081b8fffed
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
misp-core-format/raw.md
View File

@ -269,7 +269,8 @@ A MISP document **MUST** at least includes category-type-value triplet described
"deleted": false, "deleted": false,
"value": "Hello world", "value": "Hello world",
"SharingGroup": [], "SharingGroup": [],
"ShadowAttribute": [] "ShadowAttribute": [],
"RelatedAttribute": []
} }
~~~~ ~~~~
@ -401,6 +402,10 @@ deleted represents a setting that allows attributes to be revoked. Revoked attri
deleted is represented by a JSON boolean. deleted **MUST** be present. deleted is represented by a JSON boolean. deleted **MUST** be present.
#### RelatedAttribute
RelatedAttribute is an array of attributes correlating with the current attribute. Each element in the array represents an JSON object which contains an Attribute dictionnary with the external attributes correlating. Each Attribute **MUST** include the id, org_id, info and a value. Only the correlations found on the local instance are shown in RelatedAttribute.
#### value #### value
value represents the payload of an attribute. The format of the value is dependent on the type of the attribute. value represents the payload of an attribute. The format of the value is dependent on the type of the attribute.