Creation of IOC taxonomy

The IOC taxonomy was created to address automation needs.
As we share IoC's, some of them are not malicious in nature, but it's presence can point to something malicious happening.
For automation purposes, the use of data classification helps when you need to block something or not.
pull/207/head
Carlos Borges 2021-02-23 20:18:24 -03:00 committed by Alexandre Dulaunoy
parent 0e245f748c
commit 6d575d8fb8
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 26 additions and 0 deletions

26
ioc/machinetag.json Normal file
View File

@ -0,0 +1,26 @@
{
"namespace": "ioc",
"description": "An IOC classification to facilitate automation of malicious and non malicious artifacts",
"version": 1,
"predicates": [
{
"value": "artifact-state",
"expanded": "Artifact State"
}
],
"values": [
{
"predicate": "artifact state",
"entry": [
{
"value": "malicious",
"expanded": "Malicious"
},
{
"value": "not-malicious",
"expanded": "Not Malicious"
}
]
}
]
}