MISP
/
misp-rfc
mirror of https://github.com/MISP/misp-rfc
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [core] the new sighting type which is seen and confirmed as 

true-positive
main
Alexandre Dulaunoy 2023-12-24 14:37:11 +01:00
parent 7e23ecf180
commit 45fd0e0c94
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
misp-core-format/raw.md
View File

@ -1071,6 +1071,7 @@ type **MUST** be present. type describes the type of a sighting. MISP allows 3 d
| 0 | denotes an attribute which has been seen | | 0 | denotes an attribute which has been seen |
| 1 | denotes an attribute which has been seen and confirmed as false-positive | | 1 | denotes an attribute which has been seen and confirmed as false-positive |
| 2 | denotes an attribute which will be expired at the time of the sighting | | 2 | denotes an attribute which will be expired at the time of the sighting |
| 3 | denotes an attribute which has been seen and confirmed as a true-positive |
uuid **MUST** be present. uuid references the uuid of the sighted attribute. uuid **MUST** be present. uuid references the uuid of the sighted attribute.