diff --git a/MANIFEST.json b/MANIFEST.json index a87172f..ee6bbfb 100644 --- a/MANIFEST.json +++ b/MANIFEST.json @@ -603,6 +603,11 @@ "name": "veris", "version": 2 }, + { + "description": "VMRay taxonomies to map VMRay Thread Identifier scores and artifacts.", + "name": "vmray", + "version": 1 + }, { "description": "Ce vocabulaire attribue des valeurs en pourcentage à certains énoncés de probabilité", "name": "vocabulaire-des-probabilites-estimatives", @@ -615,5 +620,5 @@ } ], "url": "https://raw.githubusercontent.com/MISP/misp-taxonomies/main/", - "version": "20210324" + "version": "20210325" } diff --git a/vmray/machinetag.json b/vmray/machinetag.json new file mode 100644 index 0000000..27ee936 --- /dev/null +++ b/vmray/machinetag.json @@ -0,0 +1,91 @@ +{ + "description": "VMRay taxonomies to map VMRay Thread Identifier scores and artifacts.", + "namespace": "vmray", + "predicates": [ + { + "expanded": "VMRay Artifact", + "value": "artifact" + }, + { + "expanded": "VMRay Verdict", + "value": "verdict" + }, + { + "expanded": "VMRay Threat Identifier Analysis Score", + "value": "vti_analysis_score" + } + ], + "values": [ + { + "entry": [ + { + "colour": "#B22F45", + "expanded": "Malicious", + "value": "malicious" + }, + { + "colour": "#EDBB7E", + "expanded": "Suspicious", + "value": "suspicious" + }, + { + "colour": "#3A9A81", + "expanded": "Clean", + "value": "clean" + }, + { + "colour": "#969696", + "expanded": "N/A", + "value": "n/a" + } + ], + "predicate": "verdict" + }, + { + "entry": [ + { + "colour": "#3A9A81", + "expanded": "-1/5", + "value": "-1/5" + }, + { + "colour": "#969696", + "expanded": "1/5", + "value": "1/5" + }, + { + "colour": "#F9DA51", + "expanded": "2/5", + "value": "2/5" + }, + { + "colour": "#EDBB7E", + "expanded": "3/5", + "value": "3/5" + }, + { + "colour": "#E25959", + "expanded": "4/5", + "value": "4/5" + }, + { + "colour": "#B22F45", + "expanded": "5/5", + "value": "5/5" + } + ], + "predicate": "vti_analysis_score" + }, + { + "entry": [ + { + "colour": "#1E516E", + "expanded": "is IOC", + "value": "ioc" + } + ], + "predicate": "artifact" + } + ], + "version": 1 +}