MISP
/
misp-rfc
mirror of https://github.com/MISP/misp-rfc
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [misp-galaxy-format] category added (to be reviewed)

pull/21/head
Alexandre Dulaunoy 2018-10-19 10:34:17 +02:00
parent 3f8bccce3e
commit 5e15aef5e7
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
misp-galaxy-format/raw.md
View File

@ -78,9 +78,9 @@ Clusters are represented as a JSON [@!RFC4627] dictionary.
## Overview ## Overview
The MISP galaxy format uses the JSON [@!RFC4627] format. Each galaxy is represented as a JSON object with meta information including the following fields: name, uuid, description, version, type, authors, source, values. The MISP galaxy format uses the JSON [@!RFC4627] format. Each galaxy is represented as a JSON object with meta information including the following fields: name, uuid, description, version, type, authors, source, values, category.
name defines the name of the galaxy. The name is represented as a string and **MUST** be present. The uuid represents the Universally Unique IDentifier (UUID) [@!RFC4122] of the object reference. The uuid **MUST** be preserved. For any updates or transfer of the same object reference. UUID version 4 is **RECOMMENDED** when assigning it to a new object reference and **MUST** be present. The description is represented as a string and **MUST** be present. The uuid is represented as a string and **MUST** be present. The version is represented as a decimal and **MUST** be present. The type is represented as a string and **MUST** be present and **MUST** match the name of the galaxy file. The source is represented as a string and **MUST** be present. Authors are represented as an array containing one or more authors and **MUST** be present. name defines the name of the galaxy. The name is represented as a string and **MUST** be present. The uuid represents the Universally Unique IDentifier (UUID) [@!RFC4122] of the object reference. The uuid **MUST** be preserved. For any updates or transfer of the same object reference. UUID version 4 is **RECOMMENDED** when assigning it to a new object reference and **MUST** be present. The description is represented as a string and **MUST** be present. The uuid is represented as a string and **MUST** be present. The version is represented as a decimal and **MUST** be present. The type is represented as a string and **MUST** be present and **MUST** match the name of the galaxy file. The source is represented as a string and **MUST** be present. Authors are represented as an array containing one or more authors and **MUST** be present. The category is represented as a string and **SHOULD** be present and describes the overall category of the galaxy such as tool or actor.
Values are represented as an array containing one or more values and **MUST** be present. Values defines all values available in the galaxy. Values are represented as an array containing one or more values and **MUST** be present. Values defines all values available in the galaxy.
@ -267,6 +267,9 @@ The JSON Schema [@?JSON-SCHEMA] below defines the overall MISP galaxy formats. T
"source": { "source": {
"type": "string" "type": "string"
}, },
"category": {
"type": "string
},
"values": { "values": {
"type": "array", "type": "array",
"uniqueItems": true, "uniqueItems": true,