MISP
/
misp-taxonomies
mirror of https://github.com/MISP/misp-taxonomies
2
0
Fork 0
Code Issues Releases Wiki Activity

complete version before merge

pull/190/head
Cookie 2020-05-26 16:04:44 +02:00
parent 113e5959d5
commit 2350f8213b
1 changed files with 50 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

58
extended-event/machinetag.json
View File

@ -1,6 +1,6 @@
{ {
"namespace": "extended-event", "namespace": "extended-event",
"description": "Reasons why an event has been extended : ", "description": "Reasons why an event has been extended. ",
"version": 1, "version": 1,
"predicates": [ "predicates": [
{ {
@ -10,6 +10,21 @@
{ {
"value": "extended-analysis", "value": "extended-analysis",
"expanded": "Extended analysis" "expanded": "Extended analysis"
},
{
"value": "human-readable",
"expanded": "Human readable",
"description": "This extended event makes a human readable output of a machine or technical report."
},
{
"value": "chunked-event",
"expanded": "Chunked Event",
"description": "This extended event is a part of a large event."
},
{
"value" : "update",
"expanded" : "Update",
"description" : "Original event is deprecated"
} }
], ],
"values": [ "values": [
@ -18,19 +33,23 @@
"entry": [ "entry": [
{ {
"value": "devil-advocate", "value": "devil-advocate",
"description": "Devil's advocate" "expanded": "Devil's advocate",
"description": "Is a competitive analysis of devil's advocate type."
}, },
{ {
"value": "absurd-reasoning", "value": "absurd-reasoning",
"expanded": "Absurd reasoning" "expanded": "Absurd reasoning",
"description": "Is a competitive analysis of absurd reasoning type"
}, },
{ {
"value": "role-playing", "value": "role-playing",
"expanded": "Role playing" "expanded": "Role playing",
"description": "Is a competitive analysis of role playing type"
}, },
{ {
"value": "crystal-ball", "value": "crystal-ball",
"expanded": "Crystal ball" "expanded": "Crystal ball",
"description": "Is a competitive analysis of crystal ball type"
} }
] ]
}, },
@ -39,13 +58,36 @@
"entry": [ "entry": [
{ {
"value": "automatic-expansion", "value": "automatic-expansion",
"description": "Automatic expansion" "expanded": "Automatic expansion",
"description": "This extended event is composed of elements derived from automatic expanxions services"
}, },
{ {
"value": "aggressive-pivoting", "value": "aggressive-pivoting",
"description": "Aggressive pivoting" "expanded": "Aggressive pivoting",
} "description": "This extended event is composed of elements resulting of a careless pivoting"
},
{
"value": "complementary-analysis",
"expanded": "Complementary analysis",
"description": "This extended event is composed of elements gathered by a different analyst than the original one"
}
] ]
},
{
"predicate": "chunked-event",
"entry" : [
{
"value": "time-based",
"expanded" : "Time based",
"dscription": "is an element of a serie of extended events, split by matter of time"
},
{
"value": "counter-based",
"expanded": "Counter based",
"description": "is an element of a serie of extended events, split by number of elements"
}
]
} }
] ]
} }