Specifications used in the MISP project including MISP core format

misp misp-format misp-taxonomy protocol standard

Go to file

Alexandre Dulaunoy ccb6b0c74e add: exclusive property added to express exclusivity at predicate or value level Exclusive property allows to express if a predicate or a value is exclusive. The exclusive property applies at namespace level (if the predicate is exclusive) or at predicate level is the value is exclusive. TLP and fr-classif updated with exclusive property. The exclusive property can be used by the software (e.g. MISP) to warn users if (s)he tries to add multiple tags on the same element (attribute, event...). It's up to the configuration of the software to enforce it or not. By default, tags are not exclusive.		2017-11-29 07:54:58 +01:00
misp-core-format	ascii export updated	2017-09-21 15:59:55 +02:00
misp-galaxy-format	Introduction updated	2017-09-22 16:07:09 +02:00
misp-object-template-format	ascii export updated	2017-09-21 15:59:55 +02:00
misp-taxonomy-format	add: exclusive property added to express exclusivity at predicate or value level	2017-11-29 07:54:58 +01:00
README.md	IETF I-D updated	2017-09-22 17:11:47 +02:00

README.md

MISP standards

This repository is the official source of the specification and formats used in the MISP project.

The formats are described to support other implementations which reuse the format and ensuring an interoperability with existing MISP software and other Threat Intelligence Platforms.

All the formats can be freely reused by everyone.

MISP Formats in use and implemented in multiple software

misp-core-format (markdown source) which describes the core JSON format of MISP. Current Internet-Draft: 02
misp-taxonomy-format (markdown source) which describes the taxonomy JSON format of MISP. Current Internet-Draft: 03
misp-galaxy-format which describes the galaxy template format used to expand the threat actor modelling of MISP. Current Internet-Draft: 00
misp-object-template-format which describes the object template format to add combinedand composite object to the MISP core format. Current Internet-Draft: 00

MISP Format in design phase and implemented in at least one software prototype

misp-modules-protocol which describes the misp-modules protocol used between MISP and misp-modules.

MISP Format in design phase

misp-collaborative-voting-format which describes the collaborative voting and scoring format for the feeds providers.

Contribution

If you want to contribute to the MISP specifications, feel free to open an issue.