diff --git a/misp-core-format/raw.md b/misp-core-format/raw.md
index c0df41a..8bbc7f9 100644
--- a/misp-core-format/raw.md
+++ b/misp-core-format/raw.md
@@ -317,7 +317,7 @@ type is represented as a JSON string. type **MUST** be present and it **MUST** b
 :   filename, regkey, regkey|value, comment, text, other, text
 
 **Network activity**
-:   ip-src, ip-dst, hostname, domain, domain|ip, email-dst, url, uri, user-agent, http-method, AS, snort, pattern-in-file, pattern-in-traffic, attachment, comment, text, x509-fingerprint-sha1, other, hex
+:   ip-src, ip-dst, hostname, domain, domain|ip, email-dst, url, uri, user-agent, http-method, AS, snort, pattern-in-file, pattern-in-traffic, attachment, comment, text, x509-fingerprint-sha1, other, hex, cookie
 
 **Payload type**
 :   comment, text, other
@@ -513,7 +513,7 @@ type is represented as a JSON string. type **MUST** be present and it **MUST** b
 :   filename, regkey, regkey|value, comment, text, other, text
 
 **Network activity**
-:   ip-src, ip-dst, hostname, domain, domain|ip, email-dst, url, uri, user-agent, http-method, AS, snort, pattern-in-file, pattern-in-traffic, attachment, comment, text, x509-fingerprint-sha1, other, hex
+:   ip-src, ip-dst, hostname, domain, domain|ip, email-dst, url, uri, user-agent, http-method, AS, snort, pattern-in-file, pattern-in-traffic, attachment, comment, text, x509-fingerprint-sha1, other, hex, cookie
 
 **Payload type**
 :   comment, text, other