fix: misp tool added (misp2stix) to be used as label

MANIFEST.json

@@ -156,7 +156,7 @@
       "description": "Malware classification based on a SANS whitepaper about malware."
     },
     {
-      "version": 3,
+      "version": 5,
       "name": "misp",
       "description": "Internal MISP taxonomy."
     },

misp/machinetag.json

@@ -36,6 +36,15 @@
         }
       ]
     },
+    {
+      "predicate": "tool",
+      "entry": [
+        {
+          "expanded": "misp2stix",
+          "value": "misp2stix"
+        }
+      ]
+    },
     {
       "predicate": "confidence-level",
       "entry": [
@@ -130,9 +139,14 @@
       "description": "Event with this tag should not be synced to other MISP instances",
       "expanded": "Should not sync",
       "value": "should-not-sync"
+    },
+    {
+      "description": "Tool associated with the information taggged",
+      "expanded": "Tool",
+      "value": "tool"
     }
   ],
-  "version": 4,
+  "version": 5,
   "description": "MISP taxonomy to infer with MISP behavior or operation.",
   "expanded": "MISP",
   "namespace": "misp"