MISP
/
misp-taxonomies
mirror of https://github.com/MISP/misp-taxonomies
2
0
Fork 0
Code Issues Releases Wiki Activity

removes parts that belong to the analysis, adds predicates relating to reversing

pull/63/head
gallypette 2017-05-02 16:54:17 +02:00
parent f9d423643e
commit f91a15bcec
1 changed files with 45 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

65
analyst-assessment/machinetag.json
View File

@ -1,11 +1,7 @@
{ {
"namespace": "analyst-assessment", "namespace": "analyst-assessment",
"expanded": "Analyst (Self) Assessment", "expanded": "Analyst (Self) Assessment",
"refs": [ "description": "A series of assessment predicates describing the analyst capabilities to perform analysis. These assessment can be assigned by the analyst him/herself or by another party evaluating the analyst.",
"http://www.foo.be/docs/intelligence/Tversky_Kahneman_1974.pdf",
"http://www.foo.be/docs/intelligence/PsychofIntelNew.pdf"
],
"description": "A series of assessment predicates describing the analyst capabilities to perform analysis or making judgments under a certain level of uncertainty. These assessment can be assigned by the analyst him/herself or by another party evaluating the analyst.",
"version": 1, "version": 1,
"predicates": [ "predicates": [
{ {
@ -14,9 +10,14 @@
"description": "The analyst experience expressed in years range in the field tagged. The year range is based on a standard 40-hour work week." "description": "The analyst experience expressed in years range in the field tagged. The year range is based on a standard 40-hour work week."
}, },
{ {
"value": "alternative-points-of-view-process", "value": "binary-reversing-arch",
"expanded": "Alternative points of view process", "expanded": "Reversing arch",
"description": "A list of procedures or practices which describe alternative points of view to validate or rate an analysis. The list describes techniques or methods which could reinforce the estimative language in a human analysis and/or challenge the assumptions to reduce the potential bias of the analysis introduced by the analyst(s)." "description": "Architecture that the analyst has experience with."
},
{
"value": "binary-reversing-experience",
"expanded": "Reversing experience",
"description": "The analyst experience in reversing expressed in years range in the field tagged. The year range is based on a standard 40-hour work week."
} }
], ],
"values": [ "values": [
@ -51,31 +52,53 @@
] ]
}, },
{ {
"predicate": "alternative-points-of-view-process", "predicate": "binary-reversing-arch",
"entry": [ "entry": [
{ {
"value": "analytic-debates-within-the-organisation", "value": "x86",
"expanded": "analytic debates within the organisation" "expanded": "x86-32 & x86-64"
}, },
{ {
"value": "devils-advocates-methodology", "value": "arm",
"expanded": "Devil's advocates methodlogy" "expanded": "ARM & ARM-64"
}, },
{ {
"value": "competitive-analysis", "value": "mips",
"expanded": "competitive analysis" "expanded": "mips & mips-64"
}, },
{ {
"value": "interdisciplinary-brainstorming", "value": "powerpc",
"expanded": "interdisciplinary brainstorming" "expanded": "PowerPC"
}
]
},
{
"predicate": "binary-reversing-experience",
"entry": [
{
"numerical_value": 1,
"value": "less-than-1-year",
"expanded": "Less than 1 year"
}, },
{ {
"value": "intra-office-peer-review", "numerical_value": 2,
"expanded": "intra-office peer review" "value": "between-1-and-5-years",
"expanded": "Between 1 and 5 years"
}, },
{ {
"value": "outside-expertise-review", "numerical_value": 3,
"expanded": "Outside expertise review" "value": "between-5-and-10-years",
"expanded": "Between 5 and 10 years"
},
{
"numerical_value": 4,
"value": "between-10-and-20-years",
"expanded": "Between 10 and 20 years"
},
{
"numerical_value": 5,
"value": "more-than-20-years",
"expanded": "More than 20 years"
} }
] ]
} }