From 18e091f228a72c5cd1d9a47632f5922e7d448c0d Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Wed, 5 Oct 2016 08:58:58 +0200 Subject: [PATCH] Org and Orgc objects added --- misp-core-format/raw.md | 36 +++++++++++++++++++++++++++++++----- 1 file changed, 31 insertions(+), 5 deletions(-) diff --git a/misp-core-format/raw.md b/misp-core-format/raw.md index 6e0f55f..7da6099 100644 --- a/misp-core-format/raw.md +++ b/misp-core-format/raw.md @@ -145,16 +145,17 @@ publish_timestamp is represented as a JSON string. publish_timestamp MUST be pre #### org_id -org_id represents the Universally Unique IDentifier (UUID) [@!RFC4122] of the organization which generated the event. The org_id MUST -be updated when the event is generated by a new instance. +org_id represents a human-readable identifier referencing an Org object of the organization which generated the event. + +The org_id MUST be updated when the event is generated by a new instance. org_id is represented as a JSON string. org_id MUST be present. #### orgc_id -orgc_id represents the Universally Unique IDentifier (UUID) [@!RFC4122] of the organization which created the event. -The orgc_id MUST be preserved for any updates or transfer of the same event. UUID version 4 is RECOMMENDED when assigning it to a new event. -orgc_id is globally assigned to an organization and SHALL be kept overtime. +orgc_id represents a human-readable identifier referencing an Orgc object of the organization which created the event. + +The orgc_id and Orc object MUST be preserved for any updates or transfer of the same event. orgc_id is represented as a JSON string. orgc_id MUST be present. @@ -164,6 +165,31 @@ attribute_count represents the number of attributes in the event. attribute_coun attribute_count is represented as a JSON string. attribute_count SHALL be present. +## Objects + +### Org + +An Org object is composed of an uuid, name and id. + +The uuid represents the Universally Unique IDentifier (UUID) [@!RFC4122] of the organization. +The uuid is globally assigned to an organization and SHALL be kept overtime. + +uuid is represented as a JSON string. uuid MUST be present. + +The name is a readable description of the organization and SHOULD be present. + +### Orgc + +An Orgc object is composed of an uuid, name and id. + +The uuid MUST be preserved for any updates or transfer of the same event. UUID version 4 is RECOMMENDED when assigning it to a new event. +orgc_id is globally assigned to an organization and SHALL be kept overtime. + +The name is a readable description of the organization and SHOULD be present. + +orgc_id is represented as a JSON string. orgc_id SHOULD be present. + + MISP Project - Malware Information Sharing Platform and Threat Sharing