MISP
/
misp-taxonomies
mirror of https://github.com/MISP/misp-taxonomies
2
0
Fork 0
Code Issues Releases Wiki Activity

Add doc, update tool

pull/23/head
Raphaël Vinot 2016-06-03 14:36:48 +02:00
parent def821b567
commit c48fcc5991
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
README.md
View File

@ -18,6 +18,7 @@ The following taxonomies are described:
- [eCSIRT](./ecsirt) and IntelMQ incident classification - [eCSIRT](./ecsirt) and IntelMQ incident classification
- [EU critical sectors](./eu-critical-sectors) - EU critical sectors - [EU critical sectors](./eu-critical-sectors) - EU critical sectors
- [EUCI](./euci) - EU classified information marking - [EUCI](./euci) - EU classified information marking
- [Europol Incidents](./europol-incident) - Europol class of incidents taxonomy
- [FIRST CSIRT Case](./first_csirt_case_classification) classification - [FIRST CSIRT Case](./first_csirt_case_classification) classification
- [Information Security Marking Metadata](./dni-ism) from DNI (Director of National Intelligence - US) - [Information Security Marking Metadata](./dni-ism) from DNI (Director of National Intelligence - US)
- [Malware](./malware) classification based on a SANS document - [Malware](./malware) classification based on a SANS document

2
tools/machinetag.py
View File

@ -30,7 +30,7 @@ import json
import os.path import os.path
import argparse import argparse
taxonomies = ['admiralty-scale', 'adversary', 'tlp', 'circl', 'veris', 'ecsirt', 'dni-ism', 'nato', 'euci', 'osint', 'first_csirt_case_classification', 'malware', 'de-vs', 'fr-classification','eu-critical-sectors','dhs-ciip-sectors'] taxonomies = ['europol-incident', 'admiralty-scale', 'adversary', 'tlp', 'circl', 'veris', 'ecsirt', 'dni-ism', 'nato', 'euci', 'osint', 'first_csirt_case_classification', 'malware', 'de-vs', 'fr-classification','eu-critical-sectors','dhs-ciip-sectors']
argParser = argparse.ArgumentParser(description='Dump Machine Tags (Triple Tags) from MISP taxonomies', epilog='Available taxonomies are {0}'.format(taxonomies)) argParser = argparse.ArgumentParser(description='Dump Machine Tags (Triple Tags) from MISP taxonomies', epilog='Available taxonomies are {0}'.format(taxonomies))
argParser.add_argument('-e', action='store_true', help='Include expanded tags') argParser.add_argument('-e', action='store_true', help='Include expanded tags')
argParser.add_argument('-a', action='store_true', help='Generate asciidoctor document from MISP taxonomies') argParser.add_argument('-a', action='store_true', help='Generate asciidoctor document from MISP taxonomies')