diff --git a/misp-core-format/raw.md.txt b/misp-core-format/raw.md.txt index 9d30f91..35153d0 100644 --- a/misp-core-format/raw.md.txt +++ b/misp-core-format/raw.md.txt @@ -197,10 +197,10 @@ Internet-Draft MISP core format October 2016 2.2.1.7. timestamp - timestamp represents a reference time when the event was created, or - last updated/edited on the instance. timestamp is expressed in - seconds (decimal) since 1st of January 1970 (Unix timestamp). The - time zone MUST be UTC. + timestamp represents a reference time when the event, or one of the + attributes within the event was created, or last updated/edited + on the instance. timestamp is expressed in seconds (decimal) since + 1st of January 1970 (Unix timestamp). The time zone MUST be UTC. timestamp is represented as a JSON string. timestamp MUST be present.