From e4165d104dd6149ae1a5c223df971c90573feaf2 Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Fri, 19 May 2017 15:11:06 +0200
Subject: [PATCH] mapping tlp

---
 mapping/mapping.json | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/mapping/mapping.json b/mapping/mapping.json
index c324bdf..5d1bf1b 100644
--- a/mapping/mapping.json
+++ b/mapping/mapping.json
@@ -164,5 +164,29 @@
       "malware_classification:malware-category=\"Worm\"",
       "ms-caro-malware:malware-type=\"Worm\""
     ]
+  },
+  "tlp-white": {
+    "values": [
+      "tlp:white",
+      "ipe:traffic-light-protocol=\"WHITE\""
+    ]
+  },
+  "tlp-green": {
+    "values": [
+      "tlp:green",
+      "ipe:traffic-light-protocol=\"GREEN\""
+    ]
+  },
+  "tlp-amber": {
+    "values": [
+      "tlp:amber",
+      "ipe:traffic-light-protocol=\"AMBER\""
+    ]
+  },
+  "tlp-red": {
+    "values": [
+      "tlp:red",
+      "ipe:traffic-light-protocol=\"RED\""
+    ]
   }
 }