From 4e180e12f0e9a8a20dc0c71a7d936099342404a0 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Sun, 29 Nov 2015 10:23:14 +0100
Subject: [PATCH] NATO classification markings. (first DRAFT)

---
 nato/machinetag.json | 54 ++++++++++++++++++++++++++++++++++++++++++++
 tools/machinetag.py  |  2 +-
 2 files changed, 55 insertions(+), 1 deletion(-)
 create mode 100644 nato/machinetag.json

diff --git a/nato/machinetag.json b/nato/machinetag.json
new file mode 100644
index 0000000..3065bed
--- /dev/null
+++ b/nato/machinetag.json
@@ -0,0 +1,54 @@
+{
+  "values": [
+    {
+      "entry": [
+        {
+          "expanded": "COSMIC TOP SECRET",
+          "value": "CTS"
+        },
+        {
+          "expanded": "COSMIC TOP SECRET BOHEMIA",
+          "value": "CTS-B"
+        },
+        {
+          "expanded": "NATO SECRET",
+          "value": "NS"
+        },
+        {
+          "expanded": "NATO CONFIDENTIAL",
+          "value": "NC"
+        },
+        {
+          "expanded": "NATO RESTRICTED",
+          "value": "NR"
+        },
+        {
+          "expanded": "NATO UNCLASSIFIED",
+          "value": "NU"
+        },
+        {
+          "expanded": "COSMIC TOP SECRET ATOMAL",
+          "value": "CTS-A"
+        },
+        {
+          "expanded": "SECRET ATOMAL",
+          "value": "NS-A"
+        },
+        {
+          "expanded": "CONFIDENTIAL ATOMAL",
+          "value": "NC-A"
+        }
+      ],
+      "predicate": "classification"
+    }
+  ],
+  "predicates": [
+    {
+      "expanded": "Classification",
+      "value": "classification"
+    }
+  ],
+  "version": 1,
+  "description": "NATO classification markings.",
+  "namespace": "nato"
+}
diff --git a/tools/machinetag.py b/tools/machinetag.py
index 3dae1ba..8c58af6 100755
--- a/tools/machinetag.py
+++ b/tools/machinetag.py
@@ -30,7 +30,7 @@ import json
 import os.path
 import argparse
 
-taxonomies = ['admiralty-scale','tlp', 'circl', 'veris', 'ecsirt', 'dni-ism']
+taxonomies = ['admiralty-scale','tlp', 'circl', 'veris', 'ecsirt', 'dni-ism', 'nato']
 
 argParser = argparse.ArgumentParser(description='Dump Machine Tags (Triple Tags) from MISP taxonomies')
 argParser.add_argument('-e', action='store_true', help='Including expanded tags')