From 5e15aef5e7ff452394df3d39a2fb320e09ff4c38 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Fri, 19 Oct 2018 10:34:17 +0200 Subject: [PATCH] chg: [misp-galaxy-format] category added (to be reviewed) --- misp-galaxy-format/raw.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/misp-galaxy-format/raw.md b/misp-galaxy-format/raw.md index d19640a..b68be1d 100644 --- a/misp-galaxy-format/raw.md +++ b/misp-galaxy-format/raw.md @@ -78,9 +78,9 @@ Clusters are represented as a JSON [@!RFC4627] dictionary. ## Overview -The MISP galaxy format uses the JSON [@!RFC4627] format. Each galaxy is represented as a JSON object with meta information including the following fields: name, uuid, description, version, type, authors, source, values. +The MISP galaxy format uses the JSON [@!RFC4627] format. Each galaxy is represented as a JSON object with meta information including the following fields: name, uuid, description, version, type, authors, source, values, category. -name defines the name of the galaxy. The name is represented as a string and **MUST** be present. The uuid represents the Universally Unique IDentifier (UUID) [@!RFC4122] of the object reference. The uuid **MUST** be preserved. For any updates or transfer of the same object reference. UUID version 4 is **RECOMMENDED** when assigning it to a new object reference and **MUST** be present. The description is represented as a string and **MUST** be present. The uuid is represented as a string and **MUST** be present. The version is represented as a decimal and **MUST** be present. The type is represented as a string and **MUST** be present and **MUST** match the name of the galaxy file. The source is represented as a string and **MUST** be present. Authors are represented as an array containing one or more authors and **MUST** be present. +name defines the name of the galaxy. The name is represented as a string and **MUST** be present. The uuid represents the Universally Unique IDentifier (UUID) [@!RFC4122] of the object reference. The uuid **MUST** be preserved. For any updates or transfer of the same object reference. UUID version 4 is **RECOMMENDED** when assigning it to a new object reference and **MUST** be present. The description is represented as a string and **MUST** be present. The uuid is represented as a string and **MUST** be present. The version is represented as a decimal and **MUST** be present. The type is represented as a string and **MUST** be present and **MUST** match the name of the galaxy file. The source is represented as a string and **MUST** be present. Authors are represented as an array containing one or more authors and **MUST** be present. The category is represented as a string and **SHOULD** be present and describes the overall category of the galaxy such as tool or actor. Values are represented as an array containing one or more values and **MUST** be present. Values defines all values available in the galaxy. @@ -267,6 +267,9 @@ The JSON Schema [@?JSON-SCHEMA] below defines the overall MISP galaxy formats. T "source": { "type": "string" }, + "category": { + "type": "string + }, "values": { "type": "array", "uniqueItems": true,