MISP
/
misp-rfc
mirror of https://github.com/MISP/misp-rfc
2
0
Fork 0
Code Issues Releases Wiki Activity

fix: [core] clarify the authors field when multiple authors are mentioned 

Signed-Off: misp-stix Developer
main
Alexandre Dulaunoy 2024-10-15 14:05:09 +02:00
parent a475a9bc7e
commit a940150a8f
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
misp-core-format/raw.md
View File

@ -1183,9 +1183,7 @@ A galaxy is a simple method to express a large object called cluster that can be
## Analyst Data ## Analyst Data
Analyst Data are objects which can be in different level of MISP format including objects, attributes, event or detached from MISP core format. It can expressed Analyst Data are objects that can take different forms within the MISP format, including objects, attributes, events, or detached formats from the MISP core. They can express an Opinion, Note, or a Relationship from an analyst. These three types define the key components of analyst data and can be applied at various levels within the data structure. Analyst data can also be nested to provide additional complementary analysis on itself.
a `Opinion`, `Note` or a `Relationship` from an analyst. Those three types define the key of the analyst data and can be present at the level where analyst data is applied.
Analyst data can be nested to describe complementary analysis on the analyst data by itself.
### Opinion ### Opinion
@ -1272,6 +1270,8 @@ object\_type is represented as a JSON string.
authors represent the authors of the opinion. the authors **SHALL** be represented with an email address or an identifier. authors represent the authors of the opinion. the authors **SHALL** be represented with an email address or an identifier.
Multiple authors **SHOULD** be separated by a comma value.
authors is represented as a JSON string. authors **SHALL** be present. authors is represented as a JSON string. authors **SHALL** be present.
#### org\_uuid #### org\_uuid