diff --git a/misp-core-format/raw.md b/misp-core-format/raw.md index 4b0fecc..539a94e 100644 --- a/misp-core-format/raw.md +++ b/misp-core-format/raw.md @@ -202,22 +202,12 @@ The id is a human-readable identifier generated by the instance and used as refe uuid, name and id are represented as a JSON string. uuid, name and id MUST be present. - - - MISP Project - Malware Information Sharing Platform and Threat Sharing - - - - - -{backmatter} - ## Attribute Attributes are used to describe the indicators and contextual data of an event. The main information contained in an attribute is made up of a category-type-value triplet, where the category and type give meaning and context to the value. Through the various category-type combinations a wide range of information can be conveyed. -#### Sample Attribute Object +### Sample Attribute Object ~~~~ "Attribute": { @@ -353,7 +343,7 @@ comment is represented by a JSON string. comment MAY be present. sharing\_group\_id represents a human-readable identifier referencing a Sharing Group object that defines the distribution of the attribute, if distribution level "4" is set. -sharing\_group\_id is represented by a JSON string and MUST be present. If a distribution level other than "4" is chosen the sharing\_group\_id MUST be set to "0" +sharing\_group\_id is represented by a JSON string and MUST be present. If a distribution level other than "4" is chosen the sharing\_group\_id MUST be set to "0". #### deleted @@ -372,4 +362,15 @@ value is represented by a JSON string. value MUST be present. The authors wish to thank all the MISP community to support the creation of open standards in threat intelligence sharing. + + + MISP Project - Malware Information Sharing Platform and Threat Sharing + + + + + + +{backmatter} +