From 45fd0e0c944ebb76c22e3ef5712e48adc66ca332 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Sun, 24 Dec 2023 14:37:11 +0100 Subject: [PATCH] chg: [core] the new sighting type which is seen and confirmed as true-positive --- misp-core-format/raw.md | 1 + 1 file changed, 1 insertion(+) diff --git a/misp-core-format/raw.md b/misp-core-format/raw.md index 9a453c3..9ad2606 100755 --- a/misp-core-format/raw.md +++ b/misp-core-format/raw.md @@ -1071,6 +1071,7 @@ type **MUST** be present. type describes the type of a sighting. MISP allows 3 d | 0 | denotes an attribute which has been seen | | 1 | denotes an attribute which has been seen and confirmed as false-positive | | 2 | denotes an attribute which will be expired at the time of the sighting | +| 3 | denotes an attribute which has been seen and confirmed as a true-positive | uuid **MUST** be present. uuid references the uuid of the sighted attribute.