From 11a3a371e5cd29c7507cb01acb551d6e15816fcb Mon Sep 17 00:00:00 2001 From: Andras Iklody Date: Wed, 20 Sep 2017 10:02:01 +0200 Subject: [PATCH] Object relationship types added --- misp-core-format/raw.md | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/misp-core-format/raw.md b/misp-core-format/raw.md index b0ebb23..d0fa0f4 100644 --- a/misp-core-format/raw.md +++ b/misp-core-format/raw.md @@ -791,6 +791,8 @@ Each attribute in an object **MUST** contain the parent event's ID in the event_ Object References serve as a logical link between an Object and another referenced Object or Attribute. The relationship is categorised by an enumerated value from a fixed vocabulary. +The relationship_type is recommended to be taken from the MISP object relationship list [[@?MISP-R]] is **RECOMMENDED** to ensure a coherent naming of the tags + All Object References **MUST** contain an object_uuid, a referenced_uuid and a relationship type. ### Sample ObjectReference object @@ -859,7 +861,7 @@ referenced_type is represented as a JSON string. referenced_type **MAY** be pres relationship_type represents the human-readable context of the relationship between an object and another object or attribute as described by the object_reference. -referenced_type is represented as a JSON string. referenced_type **MUST** be present. +referenced_type is represented as a JSON string. relationship_type **MUST** be present. #### comment @@ -1536,6 +1538,14 @@ of open standards in threat intelligence sharing. + + + MISP Object Relationship Types - common vocabulary of relationships + + + + + JSON Schema: A Media Type for Describing JSON Documents