MISP
/
misp-standard.org
mirror of https://github.com/MISP/misp-standard.org
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [standards] SightingDB format added

pull/2/head
Alexandre Dulaunoy 2019-11-11 09:30:38 +01:00
parent 762393319e
commit 6198bb38ae
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
standards.md
View File

@ -17,6 +17,8 @@ This document describes the MISP core format used to exchange indicators and thr
Specification: [TXT](https://www.misp-standard.org/rfc/misp-standard-core.txt) - [HTML](https://www.misp-standard.org/rfc/misp-standard-core.html)
Lead: [MISP Project](https://www.misp-project.org/)
## MISP object template format
This document describes the MISP object template format which describes a simple JSON format to represent the various templates used to construct MISP objects. A public directory of common MISP object templates is available and relies on the MISP object reference format.
@ -25,6 +27,8 @@ Specification: [TXT](https://www.misp-standard.org/rfc/misp-standard-object-temp
Object template library: [HTML](https://www.misp-project.org/objects.html) - [PDF](https://www.misp-project.org/objects.pdf)
Lead: [MISP Project](https://www.misp-project.org/)
## MISP taxonomy format
This document describes the MISP taxonomy format which describes a simple JSON format to represent machine tag (also called triple tag) vocabularies. A public directory of common vocabularies called MISP taxonomies is available and relies on the MISP taxonomy format. MISP taxonomies are used to classify cyber security events, threats, suspicious events, or indicators.
@ -33,6 +37,8 @@ Specification: [TXT](https://www.misp-standard.org/rfc/misp-standard-taxonomy-fo
Taxonomy library: [HTML](https://www.misp-project.org/taxonomies.html) - [PDF](https://www.misp-project.org/taxonomies.pdf)
Lead: [MISP Project](https://www.misp-project.org/)
## MISP galaxy format
This document describes the MISP galaxy format which describes a simple JSON format to represent galaxies and clusters that can be attached to MISP events or attributes. A public directory of MISP galaxies is available and relies on the MISP galaxy format. MISP galaxies are used to attach additional information structures such as MISP events or attributes. MISP galaxy is a public repository of known malware, threats actors and various other collections of data that can be used to mark, classify or label data in threat information sharing.
@ -41,6 +47,16 @@ Specification: [TXT](https://www.misp-standard.org/rfc/misp-standard-galaxy-form
Galaxy library: [HTML](https://www.misp-project.org/galaxy.html) - [PDF](https://www.misp-project.org/galaxy.pdf)
Lead: [MISP Project](https://www.misp-project.org/)
## SightingDB format
This document describes the format used by SightingDB to give automated context to a given Attribute by counting occurrences and tracking times of observability. SightingDB was designed to provide to MISP and other tools an interoperable, scalable and fast way to store and retrieve attributes sightings.
Specification: [TXT](https://www.misp-standard.org/rfc/sightingdb-format.txt) - [HTML](https://www.misp-standard.org/rfc/sightingdb-format.html)
Lead: [Devo Inc](https://www.devo.com/)
# Upcoming standards
- MISP warninglist format