From 031287c19d74d137e87348c5ba6fff8827e7f8ee Mon Sep 17 00:00:00 2001 From: Cookie Date: Tue, 19 May 2020 18:59:39 +0200 Subject: [PATCH 1/4] new: [extended-event] first proposal --- extended-event/machinetag.json | 43 ++++++++++++++++++++++++++++++++++ 1 file changed, 43 insertions(+) create mode 100644 extended-event/machinetag.json diff --git a/extended-event/machinetag.json b/extended-event/machinetag.json new file mode 100644 index 0000000..35e15dd --- /dev/null +++ b/extended-event/machinetag.json @@ -0,0 +1,43 @@ +{ + "namespace": "extended-event", + "description": "Reasons why an event has been extended : ", + "version": 1, + "predicates": [ + { + "value": "competitive-analysis", + "expanded": "Competitive analysis" + }, + { + "value": "extended-analysis", + "expanded": "Extended analysis" + } + ], + "values": [ + { + "predicate": "competitive-analysis", + "entry": [ + { + "value": "devil-advocate", + "description": "Devil's advocate" + }, + { + "value": "absurd-reasoning", + "expanded": "Absurd reasoning" + } + ] + }, + { + "predicate": "extended-analysis", + "entry": [ + { + "value": "automatic-expansion", + "description": "Automatic expansion" + }, + { + "value": "aggressive-pivoting", + "description": "Aggressive pivoting" + } + ] + } + ] +} From 113e5959d5c334ee5370615172d74f9052e914ac Mon Sep 17 00:00:00 2001 From: Cookie Date: Wed, 20 May 2020 17:21:12 +0200 Subject: [PATCH 2/4] update to predicate --- extended-event/machinetag.json | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/extended-event/machinetag.json b/extended-event/machinetag.json index 35e15dd..715ea84 100644 --- a/extended-event/machinetag.json +++ b/extended-event/machinetag.json @@ -23,7 +23,15 @@ { "value": "absurd-reasoning", "expanded": "Absurd reasoning" - } + }, + { + "value": "role-playing", + "expanded": "Role playing" + }, + { + "value": "crystal-ball", + "expanded": "Crystal ball" + } ] }, { From 2350f8213ba981a24f6e0a28de08f4051a687472 Mon Sep 17 00:00:00 2001 From: Cookie Date: Tue, 26 May 2020 16:04:44 +0200 Subject: [PATCH 3/4] complete version before merge --- extended-event/machinetag.json | 58 +++++++++++++++++++++++++++++----- 1 file changed, 50 insertions(+), 8 deletions(-) diff --git a/extended-event/machinetag.json b/extended-event/machinetag.json index 715ea84..2ed46f9 100644 --- a/extended-event/machinetag.json +++ b/extended-event/machinetag.json @@ -1,6 +1,6 @@ { "namespace": "extended-event", - "description": "Reasons why an event has been extended : ", + "description": "Reasons why an event has been extended. ", "version": 1, "predicates": [ { @@ -10,6 +10,21 @@ { "value": "extended-analysis", "expanded": "Extended analysis" + }, + { + "value": "human-readable", + "expanded": "Human readable", + "description": "This extended event makes a human readable output of a machine or technical report." + }, + { + "value": "chunked-event", + "expanded": "Chunked Event", + "description": "This extended event is a part of a large event." + }, + { + "value" : "update", + "expanded" : "Update", + "description" : "Original event is deprecated" } ], "values": [ @@ -18,19 +33,23 @@ "entry": [ { "value": "devil-advocate", - "description": "Devil's advocate" + "expanded": "Devil's advocate", + "description": "Is a competitive analysis of devil's advocate type." }, { "value": "absurd-reasoning", - "expanded": "Absurd reasoning" + "expanded": "Absurd reasoning", + "description": "Is a competitive analysis of absurd reasoning type" }, { "value": "role-playing", - "expanded": "Role playing" + "expanded": "Role playing", + "description": "Is a competitive analysis of role playing type" }, { "value": "crystal-ball", - "expanded": "Crystal ball" + "expanded": "Crystal ball", + "description": "Is a competitive analysis of crystal ball type" } ] }, @@ -39,13 +58,36 @@ "entry": [ { "value": "automatic-expansion", - "description": "Automatic expansion" + "expanded": "Automatic expansion", + "description": "This extended event is composed of elements derived from automatic expanxions services" }, { "value": "aggressive-pivoting", - "description": "Aggressive pivoting" - } + "expanded": "Aggressive pivoting", + "description": "This extended event is composed of elements resulting of a careless pivoting" + }, + { + "value": "complementary-analysis", + "expanded": "Complementary analysis", + "description": "This extended event is composed of elements gathered by a different analyst than the original one" + } ] + }, + { + "predicate": "chunked-event", + "entry" : [ + { + "value": "time-based", + "expanded" : "Time based", + "dscription": "is an element of a serie of extended events, split by matter of time" + }, + { + "value": "counter-based", + "expanded": "Counter based", + "description": "is an element of a serie of extended events, split by number of elements" + } + ] } + ] } From a29f19e4b92de6ea8fecee4dc48bac63bcd196e2 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Tue, 26 May 2020 16:09:44 +0200 Subject: [PATCH 4/4] chg: [extended-event] updated to please our strict rules --- MANIFEST.json | 9 +++- extended-event/machinetag.json | 83 +++++++++++++++++----------------- 2 files changed, 48 insertions(+), 44 deletions(-) diff --git a/MANIFEST.json b/MANIFEST.json index cd4c8d8..565f88f 100644 --- a/MANIFEST.json +++ b/MANIFEST.json @@ -246,7 +246,12 @@ { "description": "Exercise is a taxonomy to describe if the information is part of one or more cyber or crisis exercise.", "name": "exercise", - "version": 7 + "version": 8 + }, + { + "description": "Reasons why an event has been extended. ", + "name": "extended-event", + "version": 1 }, { "description": "The purpose of this taxonomy is to jointly tabulate both the of these failure modes in a single place. Intentional failures wherein the failure is caused by an active adversary attempting to subvert the system to attain her goals – either to misclassify the result, infer private training data, or to steal the underlying algorithm. Unintentional failures wherein the failure is because an ML system produces a formally correct but completely unsafe outcome.", @@ -580,5 +585,5 @@ } ], "url": "https://raw.githubusercontent.com/MISP/misp-taxonomies/master/", - "version": "20200424" + "version": "20200526" } diff --git a/extended-event/machinetag.json b/extended-event/machinetag.json index 2ed46f9..63a506d 100644 --- a/extended-event/machinetag.json +++ b/extended-event/machinetag.json @@ -12,19 +12,19 @@ "expanded": "Extended analysis" }, { - "value": "human-readable", - "expanded": "Human readable", - "description": "This extended event makes a human readable output of a machine or technical report." + "value": "human-readable", + "expanded": "Human readable", + "description": "This extended event makes a human readable output of a machine or technical report." }, { - "value": "chunked-event", - "expanded": "Chunked Event", - "description": "This extended event is a part of a large event." + "value": "chunked-event", + "expanded": "Chunked Event", + "description": "This extended event is a part of a large event." }, { - "value" : "update", - "expanded" : "Update", - "description" : "Original event is deprecated" + "value": "update", + "expanded": "Update", + "description": "Original event is deprecated" } ], "values": [ @@ -34,23 +34,23 @@ { "value": "devil-advocate", "expanded": "Devil's advocate", - "description": "Is a competitive analysis of devil's advocate type." + "description": "Is a competitive analysis of devil's advocate type." }, { "value": "absurd-reasoning", "expanded": "Absurd reasoning", - "description": "Is a competitive analysis of absurd reasoning type" + "description": "Is a competitive analysis of absurd reasoning type" }, - { - "value": "role-playing", - "expanded": "Role playing", - "description": "Is a competitive analysis of role playing type" - }, - { - "value": "crystal-ball", - "expanded": "Crystal ball", - "description": "Is a competitive analysis of crystal ball type" - } + { + "value": "role-playing", + "expanded": "Role playing", + "description": "Is a competitive analysis of role playing type" + }, + { + "value": "crystal-ball", + "expanded": "Crystal ball", + "description": "Is a competitive analysis of crystal ball type" + } ] }, { @@ -59,35 +59,34 @@ { "value": "automatic-expansion", "expanded": "Automatic expansion", - "description": "This extended event is composed of elements derived from automatic expanxions services" + "description": "This extended event is composed of elements derived from automatic expanxions services" }, { "value": "aggressive-pivoting", "expanded": "Aggressive pivoting", - "description": "This extended event is composed of elements resulting of a careless pivoting" + "description": "This extended event is composed of elements resulting of a careless pivoting" }, - { - "value": "complementary-analysis", - "expanded": "Complementary analysis", - "description": "This extended event is composed of elements gathered by a different analyst than the original one" - } + { + "value": "complementary-analysis", + "expanded": "Complementary analysis", + "description": "This extended event is composed of elements gathered by a different analyst than the original one" + } ] }, { - "predicate": "chunked-event", - "entry" : [ - { - "value": "time-based", - "expanded" : "Time based", - "dscription": "is an element of a serie of extended events, split by matter of time" - }, - { - "value": "counter-based", - "expanded": "Counter based", - "description": "is an element of a serie of extended events, split by number of elements" - } - ] + "predicate": "chunked-event", + "entry": [ + { + "value": "time-based", + "expanded": "Time based", + "dscription": "is an element of a serie of extended events, split by matter of time" + }, + { + "value": "counter-based", + "expanded": "Counter based", + "description": "is an element of a serie of extended events, split by number of elements" + } + ] } - ] }