MISP
/
misp-taxonomies
mirror of https://github.com/MISP/misp-taxonomies
2
0
Fork 0
Code Issues Releases Wiki Activity

removes parts that belong to the analysis, adds predicates relating to reversing

pull/63/head
gallypette 2017-05-02 16:54:17 +02:00
parent f9d423643e
commit f91a15bcec
1 changed files with 45 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

67
analyst-assessment/machinetag.json
View File

@ -1,11 +1,7 @@
{
"namespace": "analyst-assessment",
"expanded": "Analyst (Self) Assessment",
"refs": [
"http://www.foo.be/docs/intelligence/Tversky_Kahneman_1974.pdf",
"http://www.foo.be/docs/intelligence/PsychofIntelNew.pdf"
],
"description": "A series of assessment predicates describing the analyst capabilities to perform analysis or making judgments under a certain level of uncertainty. These assessment can be assigned by the analyst him/herself or by another party evaluating the analyst.",
"description": "A series of assessment predicates describing the analyst capabilities to perform analysis. These assessment can be assigned by the analyst him/herself or by another party evaluating the analyst.",
"version": 1,
"predicates": [
{
@ -14,9 +10,14 @@
"description": "The analyst experience expressed in years range in the field tagged. The year range is based on a standard 40-hour work week."
},
{
"value": "alternative-points-of-view-process",
"expanded": "Alternative points of view process",
"description": "A list of procedures or practices which describe alternative points of view to validate or rate an analysis. The list describes techniques or methods which could reinforce the estimative language in a human analysis and/or challenge the assumptions to reduce the potential bias of the analysis introduced by the analyst(s)."
"value": "binary-reversing-arch",
"expanded": "Reversing arch",
"description": "Architecture that the analyst has experience with."
},
{
"value": "binary-reversing-experience",
"expanded": "Reversing experience",
"description": "The analyst experience in reversing expressed in years range in the field tagged. The year range is based on a standard 40-hour work week."
}
],
"values": [
@ -51,33 +52,55 @@
]
},
{
"predicate": "alternative-points-of-view-process",
"predicate": "binary-reversing-arch",
"entry": [
{
"value": "analytic-debates-within-the-organisation",
"expanded": "analytic debates within the organisation"
"value": "x86",
"expanded": "x86-32 & x86-64"
},
{
"value": "devils-advocates-methodology",
"expanded": "Devil's advocates methodlogy"
"value": "arm",
"expanded": "ARM & ARM-64"
},
{
"value": "competitive-analysis",
"expanded": "competitive analysis"
"value": "mips",
"expanded": "mips & mips-64"
},
{
"value": "interdisciplinary-brainstorming",
"expanded": "interdisciplinary brainstorming"
"value": "powerpc",
"expanded": "PowerPC"
}
]
},
{
"predicate": "binary-reversing-experience",
"entry": [
{
"numerical_value": 1,
"value": "less-than-1-year",
"expanded": "Less than 1 year"
},
{
"value": "intra-office-peer-review",
"expanded": "intra-office peer review"
"numerical_value": 2,
"value": "between-1-and-5-years",
"expanded": "Between 1 and 5 years"
},
{
"value": "outside-expertise-review",
"expanded": "Outside expertise review"
"numerical_value": 3,
"value": "between-5-and-10-years",
"expanded": "Between 5 and 10 years"
},
{
"numerical_value": 4,
"value": "between-10-and-20-years",
"expanded": "Between 10 and 20 years"
},
{
"numerical_value": 5,
"value": "more-than-20-years",
"expanded": "More than 20 years"
}
]
}
]
}
}