MISP
/
misp-rfc
mirror of https://github.com/MISP/misp-rfc
2
0
Fork 0
Code Issues Releases Wiki Activity

Fix H2 -> H4

pull/6/head
Alexandre Dulaunoy 2016-10-06 07:28:33 +02:00
parent 6198a7d080
commit 5f561afae2
1 changed files with 13 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
misp-core-format/raw.md
View File

@ -202,22 +202,12 @@ The id is a human-readable identifier generated by the instance and used as refe
uuid, name and id are represented as a JSON string. uuid, name and id MUST be present.
<reference anchor='MISP-P' target='https://github.com/MISP'>
<front>
<title>MISP Project - Malware Information Sharing Platform and Threat Sharing</title>
<author initials='' surname='MISP' fullname='MISP Community'></author>
<date></date>
</front>
</reference>
{backmatter}
## Attribute
Attributes are used to describe the indicators and contextual data of an event. The main information contained in an attribute is made up of a category-type-value triplet,
where the category and type give meaning and context to the value. Through the various category-type combinations a wide range of information can be conveyed.
#### Sample Attribute Object
### Sample Attribute Object
~~~~
"Attribute": {
@ -353,7 +343,7 @@ comment is represented by a JSON string. comment MAY be present.
sharing\_group\_id represents a human-readable identifier referencing a Sharing Group object that defines the distribution of the attribute, if distribution level "4" is set.
sharing\_group\_id is represented by a JSON string and MUST be present. If a distribution level other than "4" is chosen the sharing\_group\_id MUST be set to "0"
sharing\_group\_id is represented by a JSON string and MUST be present. If a distribution level other than "4" is chosen the sharing\_group\_id MUST be set to "0".
#### deleted
@ -372,4 +362,15 @@ value is represented by a JSON string. value MUST be present.
The authors wish to thank all the MISP community to support the creation
of open standards in threat intelligence sharing.
<reference anchor='MISP-P' target='https://github.com/MISP'>
<front>
<title>MISP Project - Malware Information Sharing Platform and Threat Sharing</title>
<author initials='' surname='MISP' fullname='MISP Community'></author>
<date></date>
</front>
</reference>
{backmatter}