misp-taxonomies/osint/machinetag.json

{
  "predicates": [
    {
      "expanded": "Source Type",
      "value": "source-type"
    },
    {
      "expanded": "Lifetime of the information as Open Source Intelligence",
      "value": "lifetime"
    },
    {
      "expanded": "Certainty of the elements mentioned in this Open Source Intelligence",
      "value": "certainty"
    }
  ],
  "version": 10,
  "description": "Open Source Intelligence - Classification (MISP taxonomies)",
  "namespace": "osint",
  "values": [
    {
      "predicate": "source-type",
      "entry": [
        {
          "value": "blog-post",
          "expanded": "Blog post"
        },
        {
          "value": "microblog-post",
          "expanded": "Microblog post like Twitter"
        },
        {
          "value": "technical-report",
          "expanded": "Technical or analysis report"
        },
        {
          "value": "presentation",
          "expanded": "Presentation or slidedeck"
        },
        {
          "value": "news-report",
          "expanded": "News report"
        },
        {
          "value": "pastie-website",
          "expanded": "Pastie-like website"
        },
        {
          "value": "electronic-forum",
          "expanded": "Electronic forum"
        },
        {
          "value": "mailing-list",
          "expanded": "Mailing-list"
        },
        {
          "value": "block-or-filter-list",
          "expanded": "Block or Filter List"
        },
        {
          "value": "source-code-repository",
          "expanded": "Source code repository"
        },
        {
          "value": "accessible-evidence",
          "expanded": "Infrastructure allowing the gathering of the evidences such as open directories, public web services or left over on public services"
        },
        {
          "value": "expansion",
          "expanded": "Expansion"
        },
        {
          "value": "automatic-analysis",
          "expanded": "Automatic analysis including dynamic analysis or sandboxes output"
        },
        {
          "value": "automatic-collection",
          "expanded": "Automatic collection including honeypots, spamtraps or equivalent technologies"
        },
        {
          "value": "manual-analysis",
          "expanded": "Manual analysis or investigation"
        },
        {
          "value": "manual-collection",
          "expanded": "Manual collection from crawlers, honeypots, spamtraps, gathering tools or equivalent technologies"
        },
        {
          "value": "unknown",
          "expanded": "Unknown"
        },
        {
          "value": "other",
          "expanded": "Other source not specified in this list"
        }
      ]
    },
    {
      "entry": [
        {
          "description": "Information available publicly on long-term",
          "expanded": "Perpetual",
          "value": "perpetual"
        },
        {
          "description": "Information available publicly on short-term",
          "expanded": "Ephemeral",
          "value": "ephemeral"
        }
      ],
      "predicate": "lifetime"
    },
    {
      "entry": [
        {
          "description": "Certainty",
          "expanded": "Certainty (probability equals 1 - 100%)",
          "value": "100",
          "numerical_value": 100
        },
        {
          "description": "Almost certain",
          "expanded": "Almost certain (probability equals 0.93 - 93%)",
          "value": "93",
          "numerical_value": 93
        },
        {
          "description": "Probable",
          "expanded": "Probable (probability equals 0.75 - 75%)",
          "value": "75",
          "numerical_value": 75
        },
        {
          "description": "Chances about even",
          "expanded": "Chances about even (probability equals 0.50 - 50%)",
          "value": "50",
          "numerical_value": 50
        },
        {
          "description": "Probably not",
          "expanded": "Probably not (probability equals 0.30 - 30%)",
          "value": "30",
          "numerical_value": 30
        },
        {
          "description": "Almost certainly not",
          "expanded": "Almost certainly not (probability equals 0.07 - 7%)",
          "value": "7",
          "numerical_value": 7
        },
        {
          "description": "Impossibility",
          "expanded": "Impossibility (probability equals 0 - 0%)",
          "value": "0",
          "numerical_value": 0
        }
      ],
      "predicate": "certainty"
    }
  ]
}