diff --git a/misp-workflow/machinetag.json b/misp-workflow/machinetag.json
index 4e912b6..e12f006 100644
--- a/misp-workflow/machinetag.json
+++ b/misp-workflow/machinetag.json
@@ -8,6 +8,21 @@
       "value": "action-taken",
       "expanded": "Action taken",
       "description": "Action taken during the workflow execution"
+    },
+    {
+      "value": "analysis",
+      "expanded": "Analysis",
+      "description": "Result of the analysis executed during the workflow execution"
+    },
+    {
+      "value": "mutability",
+      "expanded": "Mutability",
+      "description": "Describe if the workflow is allowed to modify data"
+    },
+    {
+      "value": "run",
+      "expanded": "Run",
+      "description": "Describe if the workflow is allowed to run on the data being passed"
     }
   ],
   "values": [
@@ -39,6 +54,41 @@
           "expanded": "Execution stopped"
         }
       ]
+    },
+    {
+      "predicate": "analysis",
+      "entry": [
+        {
+          "value": "false-positive",
+          "expanded": "False positive"
+        },
+        {
+          "value": "highly-likely-positive",
+          "expanded": "Highly Likely Positive"
+        },
+        {
+          "value": "known-file-hash",
+          "expanded": "Known file hash"
+        }
+      ]
+    },
+    {
+      "predicate": "mutability",
+      "entry": [
+        {
+          "value": "allowed",
+          "expanded": "Allowed"
+        }
+      ]
+    },
+    {
+      "predicate": "run",
+      "entry": [
+        {
+          "value": "allowed",
+          "expanded": "Allowed"
+        }
+      ]
     }
   ]
 }