MISP
/
misp-rfc
mirror of https://github.com/MISP/misp-rfc
2
0
Fork 0
Code Issues Releases Wiki Activity

Compare commits

base: MISP:fc4a0056320bc32efe66cbe3d6dd4a61fe129793
Branches Tags
MISP:main
MISP:master
MISP:Rafiot-patch-1
..
compare: MISP:1b9206f4867ba23b010a6c51783b37d9138cf23f
Branches Tags
MISP:main
MISP:master
MISP:Rafiot-patch-1

No commits in common. "fc4a0056320bc32efe66cbe3d6dd4a61fe129793" and "1b9206f4867ba23b010a6c51783b37d9138cf23f" have entirely different histories.
fc4a005632 ... 1b9206f486

1 changed files with 8 additions and 10 deletions
Show Stats Expand all files Collapse all files

18
misp-core-format/raw.md
View File

@ -752,34 +752,32 @@ id is represented as a JSON string. id **SHALL** be present.
name represents the human-readable name of the object describing the intent of the object package.
name is represented as a JSON string. name **MUST** be present.
name is represented as a JSON string. name **MUST** be present
#### meta-category
meta-category represents the sub-category of objects that the given object belongs to. meta-categories are not
tied to a fixed list of options but can be created on the fly.
meta-category is represented as a JSON string. meta-category **MUST** be present.
meta-category is represented as a JSON string. meta-category **MUST** be present
#### description
description is a human-readable description of the given object type, as derived from the template used for creation.
description is represented as a JSON string. description **SHALL** be present.
description is represented as a JSON string. id **SHALL** be present.
#### template\_uuid
template_uuid represents the Universally Unique IDentifier (UUID) [@!RFC4122] of the template used to create the object. The uuid **MUST** be preserved
uuid represents the Universally Unique IDentifier (UUID) [@!RFC4122] of the template used to create the object. The uuid **MUST** be preserved
to preserve the object's association with the correct template used for creation. UUID version 4 is **RECOMMENDED** when assigning it to a new object.
template_uuid is represented as a JSON string. template_uuid **MUST** be present.
#### template\_version
template_version represents a numeric incrementing version of the template used to create the object. It is used to associate the object to the
correct version of the template and together with the template_uuid forms an association to the correct template type and version.
template_version is represented as a JSON string. template_version **MUST** be present.
version is represented as a JSON string. version **MUST** be present.
#### event\_id
@ -829,7 +827,7 @@ comment is represented by a JSON string. comment **MAY** be present.
#### deleted
deleted represents a setting that allows objects to be revoked. Revoked objects are not actionable and exist merely to inform other instances of a revocation.
deleted represents a setting that allows attributes to be revoked. Revoked attributes are not actionable and exist merely to inform other instances of a revocation.
deleted is represented by a JSON boolean. deleted **MUST** be present.
@ -902,7 +900,7 @@ timestamp is represented as a JSON string. timestamp **MUST** be present.
object_id represents the human-readable identifier of the object that the object reference belongs to on a specific MISP instance. A human-readable identifier **MUST** be
represented as an unsigned integer.
object_id is represented as a JSON string. object_id **SHALL** be present.
event_id is represented as a JSON string. event_id **SHALL** be present.
#### event_id
@ -927,7 +925,7 @@ referenced_type is represented as a JSON string. referenced_type **MAY** be pres
relationship_type represents the human-readable context of the relationship between an object and another object or attribute as described by the object_reference.
relationship_type is represented as a JSON string. relationship_type **MUST** be present.
referenced_type is represented as a JSON string. relationship_type **MUST** be present.
#### comment