From ac1a76889ee956174fc1732d82d06be6500cb213 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Fri, 15 Jan 2016 09:01:25 +0100 Subject: [PATCH] OSINT taxonomy (early version) added --- osint/machinetag.json | 61 +++++++++++++++++++++++++++++++++++++++++++ tools/machinetag.py | 2 +- 2 files changed, 62 insertions(+), 1 deletion(-) create mode 100644 osint/machinetag.json diff --git a/osint/machinetag.json b/osint/machinetag.json new file mode 100644 index 0000000..ad04cdf --- /dev/null +++ b/osint/machinetag.json @@ -0,0 +1,61 @@ +{ + "predicates": [ + { + "expanded": "Source Type", + "value": "source-type" + }, + { + "expanded": "Lifetime of the information as Open Source Intelligence", + "value": "lifetime" + } + ], + "version": 1, + "description": "Open Source Intelligence - Classification (MISP taxonomies)", + "namespace": "osint", + "values": [ + { + "predicate": "source-type", + "entry": [ + { + "value": "blog-post", + "expanded": "Blog post" + }, + { + "value": "technical-report", + "expanded": "Technical or analysis report" + }, + { + "value": "news-report", + "expanded": "News report" + }, + { + "value": "pastie-website", + "expanded": "Pastie-like website" + }, + { + "value": "electronic-forum", + "expanded": "Electronic forum" + }, + { + "value": "mailing-list", + "expanded": "Mailing-list" + } + ] + }, + { + "entry": [ + { + "description": "Information available publicly on long-term", + "expanded": "Perpetual", + "value": "perpetual" + }, + { + "description": "Information available publicly on short-term", + "expanded": "Ephemeral", + "value": "ephemeral" + } + ], + "predicate": "lifetime" + } + ] +} diff --git a/tools/machinetag.py b/tools/machinetag.py index b84ed01..370b366 100755 --- a/tools/machinetag.py +++ b/tools/machinetag.py @@ -30,7 +30,7 @@ import json import os.path import argparse -taxonomies = ['admiralty-scale','tlp', 'circl', 'veris', 'ecsirt', 'dni-ism', 'nato', 'euci'] +taxonomies = ['admiralty-scale','tlp', 'circl', 'veris', 'ecsirt', 'dni-ism', 'nato', 'euci', 'osint'] argParser = argparse.ArgumentParser(description='Dump Machine Tags (Triple Tags) from MISP taxonomies') argParser.add_argument('-e', action='store_true', help='Include expanded tags')