Merge pull request #80 from droe/master

Add automation-level predicate to misp taxonomy

misp/machinetag.json

@@ -70,6 +70,26 @@
         }
       ]
     },
+    {
+      "predicate": "automation-level",
+      "entry": [
+        {
+          "expanded": "Generated automatically without human verification",
+          "value": "unsupervised",
+          "numerical_value": 100
+        },
+        {
+          "expanded": "Generated automatically but verified by a human",
+          "value": "reviewed",
+          "numerical_value": 50
+        },
+        {
+          "expanded": "Output of human analysis",
+          "value": "manual",
+          "numerical_value": 0
+        }
+      ]
+    },
     {
       "predicate": "threat-level",
       "entry": [
@@ -135,6 +155,10 @@
       "expanded": "Cyberthreat Effect Universal Scale - MISP's internal threat level taxonomy",
       "value": "threat-level"
     },
+    {
+      "expanded": "Automation level",
+      "value": "automation-level"
+    },
     {
       "description": "Event with this tag should not be synced to other MISP instances",
       "expanded": "Should not sync",
@@ -146,7 +170,7 @@
       "value": "tool"
     }
   ],
-  "version": 5,
+  "version": 6,
   "description": "MISP taxonomy to infer with MISP behavior or operation.",
   "expanded": "MISP",
   "namespace": "misp"