diff --git a/PAP/machinetag.json b/PAP/machinetag.json index c6be37e..8bf3381 100644 --- a/PAP/machinetag.json +++ b/PAP/machinetag.json @@ -2,23 +2,28 @@ "namespace": "PAP", "expanded": "Permissible Actions Protocol", "description": "The Permissible Actions Protocol - or short: PAP - was designed to indicate how the received information can be used.", - "version": 2, + "version": 3, "exclusive": true, "predicates": [ { "value": "RED", "expanded": "(PAP:RED) Non-detectable actions only. Recipients may not use PAP:RED information on the network. Only passive actions on logs, that are not detectable from the outside.", - "colour": "#ff0000" + "colour": "#ff2b2b" }, { "value": "AMBER", "expanded": "(PAP:AMBER) Passive cross check. Recipients may use PAP:AMBER information for conducting online checks, like using services provided by third parties (e.g. VirusTotal), or set up a monitoring honeypot.", - "colour": "#ffa800" + "colour": "#ffc000" }, { "value": "GREEN", "expanded": "(PAP:GREEN) Active actions allowed. Recipients may use PAP:GREEN information to ping the target, block incoming/outgoing traffic from/to the target or specifically configure honeypots to interact with the target.", - "colour": "#00ad1c" + "colour": "#33ff00" + }, + { + "value": "CLEAR", + "expanded": "(PAP:CLEAR) No restrictions in using this information.", + "colour": "#ffffff" }, { "value": "WHITE",