MISP
/
misp-taxonomies
mirror of https://github.com/MISP/misp-taxonomies
2
0
Fork 0
Code Issues Releases Wiki Activity

Added: Collaborative intelligence support language is a common language to support analysts to 

perform their analysis to get crowdsourced support when using threat intelligence sharing platform
like MISP. The objective of this language is to advance collaborative analysis and to share earlier than later.
pull/75/head
Alexandre Dulaunoy 2017-10-02 11:53:33 +02:00
parent 6a6168b4a5
commit e0b1437f4a
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 68 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

68
collaborative-intelligence/machinetag.json Normal file
View File

@ -0,0 +1,68 @@
{
"namespace": "collaborative-intelligence",
"expanded": "collaborative intelligence support language",
"description": "Collaborative intelligence support language is a common language to support analysts to perform their analysis to get crowdsourced support when using threat intelligence sharing platform like MISP. The objective of this language is to advance collaborative analysis and to share earlier than later.",
"version": 1,
"predicates": [
{
"value": "request",
"expanded": "Request",
"description": "Request predicate covers all the requests which can be done by analysts or organisations willing to get additional information to support their analysis."
}
],
"values": [
{
"predicate": "request",
"entry": [
{
"value": "sample",
"expanded": "Request a binary sample"
},
{
"value": "deobfuscated-sample",
"expanded": "Request a deobfuscated sample of the shared sample"
},
{
"value": "more-samples",
"expanded": "Request additional samples compared to the original analysis to build a competitive analysis on the reversing aspect"
},
{
"value": "related-samples",
"expanded": "Request related samples required for further analysis"
},
{
"value": "static-analysis",
"expanded": "Request additional static analysis or reversing on the information shared"
},
{
"value": "context",
"expanded": "Request more contextual information"
},
{
"value": "abuse-contact",
"expanded": "Request an abuse contact to report to"
},
{
"value": "historical-information",
"expanded": "Request more historical information from"
},
{
"value": "complementary-validation",
"expanded": "Request complementary validation"
},
{
"value": "target-information",
"expanded": "Request about the target(s) including field of activities or companies"
},
{
"value": "request-analysis",
"expanded": "Request further technical or tactical analysis"
},
{
"value": "more-information",
"expanded": "Request for generic additional information"
}
]
}
]
}