diff --git a/misp-galaxy-format/raw.md b/misp-galaxy-format/raw.md index 7be6dfe..8a3fdfd 100644 --- a/misp-galaxy-format/raw.md +++ b/misp-galaxy-format/raw.md @@ -96,13 +96,12 @@ Meta contains a list of custom defined JSON key value pairs. Users **SHOULD** re properties is used to provide clusters with additional properties. Properties are represented as an array containing one or more strings ans **MAY** be present. -derivated_from, refs, synonyms **SHALL** be used to give further informations. refs is represented as an containing one or more strings and **SHALL** be present. synonyms is represented as an containing one or more strings and **SHALL** be present. derivated_from is represented as an containing one or more strings and **SHALL** be present. +derivated_from, refs, synonyms **SHALL** be used to give further informations. refs is represented as an array containing one or more strings and **SHALL** be present. synonyms is represented as an array containing one or more strings and **SHALL** be present. derivated_from is represented as an array containing one or more strings and **SHALL** be present. date, status **MAY** be used to give time information about an cluster. date is represented as a string describing a time or period and **SHALL** be present. status is represented as a string describing the current status of the clusters. It **MAY** also describe a time or period and **SHALL** be present. colour fields MAY be used at predicates or values level to set a specify colour that MAY be used by the implementation. The colour field is described as an RGB colour fill in hexadecimal representation. - complexity, effectiveness, impact, possible_issues **MAY** be used to give further information in preventive-measure galaxy. complexity is represented by an enumerated value from a fixed vocabulary and **SHALL** be present. effectiveness is represented by an enumerated value from a fixed vocabulary and **SHALL** be present. impact is represented by an enumerated value from a fixed vocabulary and **SHALL** be present. possible_issues is represented as a string and **SHOULD** be present. Example use of the complexity, effectiveness, impact, possible_issues fields in the preventive-measure galaxy: