MISP
/
misp-rfc
mirror of https://github.com/MISP/misp-rfc
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #47 from 0xThiebaut/patch-9 

Correct `Event` and `ShadowAttribute`'s `Orgc` and `Org`
main
Alexandre Dulaunoy 2022-02-14 16:33:21 +01:00 committed by GitHub
parent 2015fa059d e8caee04ed
commit 4ff1534786
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
misp-core-format/raw.md
View File

@ -218,9 +218,9 @@ extends\_uuid represents which event is extended by this event. The extends\_uui
extends\_uuid is represented as a JSON string. extends\_uuid **SHOULD** be present.
## Objects
### Event Objects
### Org
#### Org
An Org object is composed of an uuid, name and id.
@ -233,7 +233,7 @@ A human-readable identifier **MUST** be represented as an unsigned integer.
uuid, name and id are represented as a JSON string. uuid, name and id **MUST** be present.
#### Sample Org Object
##### Sample Org Object
~~~~
"Org": {
@ -243,7 +243,7 @@ uuid, name and id are represented as a JSON string. uuid, name and id **MUST** b
}
~~~~
### Orgc
#### Orgc
An Orgc object is composed of an uuid, name and id.
@ -650,7 +650,15 @@ last_seen represents a reference time when the attribute was last seen. last_see
last_seen is represented as a JSON string. last_seen **MAY** be present.
### Org
#### value
value represents the payload of an attribute. The format of the value is dependent on the type of the attribute.
value is represented by a JSON string. value **MUST** be present.
### ShadowAttribute Objects
#### Org
An Org object is composed of an uuid, name and id.
@ -663,7 +671,7 @@ A human-readable identifier **MUST** be represented as an unsigned integer.
uuid, name and id are represented as a JSON string. uuid, name and id **MUST** be present.
#### Sample Org Object
##### Sample Org Object
~~~~
"Org": {
@ -673,12 +681,6 @@ uuid, name and id are represented as a JSON string. uuid, name and id **MUST** b
}
~~~~
#### value
value represents the payload of an attribute. The format of the value is dependent on the type of the attribute.
value is represented by a JSON string. value **MUST** be present.
## Object
Objects serve as a contextual bond between a list of attributes within an event. Their main purpose is to describe more complex structures than can be described by a single attribute