From fd568ff71f449adad0fbab10c33ab9aebb4e1365 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Tue, 10 Apr 2018 10:46:03 +0200
Subject: [PATCH] add: extends_uuid added - to extend another event from a MISP
 event

---
 misp-core-format/raw.md | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/misp-core-format/raw.md b/misp-core-format/raw.md
index a557529..6448d3a 100755
--- a/misp-core-format/raw.md
+++ b/misp-core-format/raw.md
@@ -5,7 +5,7 @@
 % ipr= "trust200902"
 % area = "Security"
 %
-% date = 2018-02-09T00:00:00Z
+% date = 2018-04-10T00:00:00Z
 %
 % [[author]]
 % initials="A."
@@ -210,6 +210,11 @@ sharing\_group\_id represents a human-readable identifier referencing a Sharing
 
 sharing\_group\_id is represented by a JSON string and **SHOULD** be present. If a distribution level other than "4" is chosen the sharing\_group\_id **MUST** be set to "0".
 
+#### extends_uuid
+
+extends\_uuid represents which event is extended by this event. The extend\_uuid is described as an Universally Unique IDentifier (UUID) [@!RFC4122] with the UUID of the extended event.
+
+extends\_uuid is represented as a JSON string. extends\_uuid **SHOULD** be present.
 
 ## Objects