MISP
/
misp-rfc
mirror of https://github.com/MISP/misp-rfc
2
0
Fork 0
Code Issues Releases Wiki Activity

Fix H2 -> H4

pull/6/head
Alexandre Dulaunoy 2016-10-06 07:28:33 +02:00
parent 6198a7d080
commit 5f561afae2
1 changed files with 13 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
misp-core-format/raw.md
View File

@ -202,22 +202,12 @@ The id is a human-readable identifier generated by the instance and used as refe
uuid, name and id are represented as a JSON string. uuid, name and id MUST be present. uuid, name and id are represented as a JSON string. uuid, name and id MUST be present.
<reference anchor='MISP-P' target='https://github.com/MISP'>
<front>
<title>MISP Project - Malware Information Sharing Platform and Threat Sharing</title>
<author initials='' surname='MISP' fullname='MISP Community'></author>
<date></date>
</front>
</reference>
{backmatter}
## Attribute ## Attribute
Attributes are used to describe the indicators and contextual data of an event. The main information contained in an attribute is made up of a category-type-value triplet, Attributes are used to describe the indicators and contextual data of an event. The main information contained in an attribute is made up of a category-type-value triplet,
where the category and type give meaning and context to the value. Through the various category-type combinations a wide range of information can be conveyed. where the category and type give meaning and context to the value. Through the various category-type combinations a wide range of information can be conveyed.
#### Sample Attribute Object ### Sample Attribute Object
~~~~ ~~~~
"Attribute": { "Attribute": {
@ -353,7 +343,7 @@ comment is represented by a JSON string. comment MAY be present.
sharing\_group\_id represents a human-readable identifier referencing a Sharing Group object that defines the distribution of the attribute, if distribution level "4" is set. sharing\_group\_id represents a human-readable identifier referencing a Sharing Group object that defines the distribution of the attribute, if distribution level "4" is set.
sharing\_group\_id is represented by a JSON string and MUST be present. If a distribution level other than "4" is chosen the sharing\_group\_id MUST be set to "0" sharing\_group\_id is represented by a JSON string and MUST be present. If a distribution level other than "4" is chosen the sharing\_group\_id MUST be set to "0".
#### deleted #### deleted
@ -372,4 +362,15 @@ value is represented by a JSON string. value MUST be present.
The authors wish to thank all the MISP community to support the creation The authors wish to thank all the MISP community to support the creation
of open standards in threat intelligence sharing. of open standards in threat intelligence sharing.
<reference anchor='MISP-P' target='https://github.com/MISP'>
<front>
<title>MISP Project - Malware Information Sharing Platform and Threat Sharing</title>
<author initials='' surname='MISP' fullname='MISP Community'></author>
<date></date>
</front>
</reference>
{backmatter}