MISP
/
misp-taxonomies
mirror of https://github.com/MISP/misp-taxonomies
2
0
Fork 0
Code Issues Releases Wiki Activity

After running the ./jq_all_the_things.sh

pull/185/head
Sebastien Tricaud 2020-04-02 16:29:44 -07:00
parent c4c65a7cf1
commit 95fb4ef221
1 changed files with 80 additions and 80 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

160
trust/machinetag.json
View File

@ -1,54 +1,54 @@
{ {
"predicates": [ "predicates": [
{ {
"colour": "#2657ff", "colour": "#2657ff",
"description": "This domain is known to be good", "description": "This domain is known to be good",
"expanded": "A domain, the human name given to a host can be trusted", "expanded": "A domain, the human name given to a host can be trusted",
"value": "domain" "value": "domain"
}, },
{ {
"colour": "#e8c90e", "colour": "#e8c90e",
"description": "This IP is known to be good", "description": "This IP is known to be good",
"expanded": "This IP address can be trusted", "expanded": "This IP address can be trusted",
"value": "ip" "value": "ip"
}, },
{ {
"colour": "#0E40E8", "colour": "#0E40E8",
"description": "This SHA256 Hash can be trusted", "description": "This SHA256 Hash can be trusted",
"expanded": "This SHA256 Hash can be trusted", "expanded": "This SHA256 Hash can be trusted",
"value": "sha256" "value": "sha256"
}, },
{ {
"colour": "#0E40E8", "colour": "#0E40E8",
"description": "This SHA384 Hash can be trusted", "description": "This SHA384 Hash can be trusted",
"expanded": "This SHA384 Hash can be trusted", "expanded": "This SHA384 Hash can be trusted",
"value": "sha384" "value": "sha384"
}, },
{ {
"colour": "#0E40E8", "colour": "#0E40E8",
"description": "This SHA512 Hash can be trusted", "description": "This SHA512 Hash can be trusted",
"expanded": "This SHA512 Hash can be trusted", "expanded": "This SHA512 Hash can be trusted",
"value": "sha512" "value": "sha512"
}, },
{ {
"colour": "#00BD25", "colour": "#00BD25",
"description": "This URI can be trusted", "description": "This URI can be trusted",
"expanded": "This URI can be trusted", "expanded": "This URI can be trusted",
"value": "uri" "value": "uri"
}, },
{ {
"colour": "#00BD25", "colour": "#00BD25",
"description": "This URL can be trusted", "description": "This URL can be trusted",
"expanded": "This URL can be trusted", "expanded": "This URL can be trusted",
"value": "url" "value": "url"
}, },
{ {
"colour": "#9D9D9D", "colour": "#9D9D9D",
"description": "This email is trusted", "description": "This email is trusted",
"expanded": "This email can be trusted", "expanded": "This email can be trusted",
"value": "email" "value": "email"
} }
], ],
"values": [ "values": [
{ {
"predicate": "confidence", "predicate": "confidence",
@ -92,34 +92,34 @@
} }
] ]
}, },
{ {
"predicate": "change-likelihood", "predicate": "change-likelihood",
"entry": [ "entry": [
{ {
"value": "low", "value": "low",
"expanded": "Low change probability" "expanded": "Low change probability"
}, },
{ {
"value": "medium", "value": "medium",
"expanded": "Medium change probability" "expanded": "Medium change probability"
}, },
{ {
"value": "high", "value": "high",
"expanded": "High change probability" "expanded": "High change probability"
}, },
{ {
"value": "unknown", "value": "unknown",
"expanded": "Unknown change probability" "expanded": "Unknown change probability"
} }
] ]
} }
], ],
"refs": [ "refs": [
"https://trust.fyi/" "https://trust.fyi/"
], ],
"version": 1, "version": 1,
"description": "The Indicator of Trust provides insight about data on what can be trusted and known as a good actor. Similar to a whitelist but on steroids, reusing features one would use with Indicators of Compromise, but to filter out what is known to be good.", "description": "The Indicator of Trust provides insight about data on what can be trusted and known as a good actor. Similar to a whitelist but on steroids, reusing features one would use with Indicators of Compromise, but to filter out what is known to be good.",
"expanded": "Indicators of Trust", "expanded": "Indicators of Trust",
"namespace": "trust", "namespace": "trust",
"exclusive": true "exclusive": true
} }