Creation of IOC taxonomy
The IOC taxonomy was created to address automation needs. As we share IoC's, some of them are not malicious in nature, but it's presence can point to something malicious happening. For automation purposes, the use of data classification helps when you need to block something or not.pull/207/head
parent
0e245f748c
commit
6d575d8fb8
|
@ -0,0 +1,26 @@
|
|||
{
|
||||
"namespace": "ioc",
|
||||
"description": "An IOC classification to facilitate automation of malicious and non malicious artifacts",
|
||||
"version": 1,
|
||||
"predicates": [
|
||||
{
|
||||
"value": "artifact-state",
|
||||
"expanded": "Artifact State"
|
||||
}
|
||||
],
|
||||
"values": [
|
||||
{
|
||||
"predicate": "artifact state",
|
||||
"entry": [
|
||||
{
|
||||
"value": "malicious",
|
||||
"expanded": "Malicious"
|
||||
},
|
||||
{
|
||||
"value": "not-malicious",
|
||||
"expanded": "Not Malicious"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
Loading…
Reference in New Issue