From a84e06b1346c2365a1b5eb39fbbd66e010d08128 Mon Sep 17 00:00:00 2001
From: Sami Mokaddem <mokaddem.sami@gmail.com>
Date: Fri, 12 Apr 2024 09:38:05 +0200
Subject: [PATCH] chg: [cheatsheet] Added element collection in data-model

---
 cheatsheets/cheatsheet-data-model.tex | 28 ++++++++++++++-------------
 cheatsheets/utils.tex                 |  2 ++
 2 files changed, 17 insertions(+), 13 deletions(-)

diff --git a/cheatsheets/cheatsheet-data-model.tex b/cheatsheets/cheatsheet-data-model.tex
index a2830fe..1693d7e 100644
--- a/cheatsheets/cheatsheet-data-model.tex
+++ b/cheatsheets/cheatsheet-data-model.tex
@@ -140,17 +140,9 @@
 
 \newpage
 
-% Creates a box with a label taking 1/3 of the available width
-% arg1[optional] = icon
-% arg2[optional] = purpose
-% arg3[optional] = usecase
-% arg4[optional] = actions
-% arg5[optional] = description
-% arg6 = title
-% arg7 = content
 \begin{multicols*}{3}
     % Analyst Note
-        \cheatbox[\faicon{sticky-note}]
+    \cheatbox[\faicon{sticky-note}]
         [Share and add an analysis to any MISP data]
         [Describe information about specific details, annotate elements]
         [\distributable \synchronisable]
@@ -162,8 +154,8 @@
             $\blacktriangleright$ The note is actually attached to the target's UUID
         }
 
-        % Analyst Opinion
-        \cheatbox[\faicon{gavel}]
+    % Analyst Opinion
+    \cheatbox[\faicon{gavel}]
         [Share and add an opinion to any MISP data]
         [Provide feedback to third-parties, Coordinate and Collaborate]
         [\distributable \synchronisable]
@@ -174,8 +166,8 @@
             $\blacktriangleright$ The numerical value of the \opinion is $\in [0, 100]$. where $50$ is the neutral point. Any values $<50$ are considered negatives, values $>50$ are considered positives.
         }
 
-        % Analyst Relationship
-        \cheatbox[\faicon{arrow-up}]
+    % Analyst Relationship
+    \cheatbox[\faicon{arrow-up}]
         [Create a relationship between elements]
         [Manually create correlation link, add similarities]
         [\distributable \synchronisable]
@@ -186,4 +178,14 @@
             $\blacktriangleright$ Example could be an \event $\rightarrow$ \event relationship where one is \textit{Suspected to be part of the same campaign based on HUMINT sources}
         }
 
+    % Element Collection
+    \cheatbox[\faicon{object-group}]
+        [Allow groupping multiple elements into a single collection]
+        [Grouping \events together if they are part of the same campaing]
+        [\distributable]
+        [Group element into collection]
+        {\linkdest{collection}Element Collection}
+        {
+        }
+
 \end{multicols*}
diff --git a/cheatsheets/utils.tex b/cheatsheets/utils.tex
index c31687a..ca6e014 100644
--- a/cheatsheets/utils.tex
+++ b/cheatsheets/utils.tex
@@ -31,6 +31,8 @@
 \newcommand{\opinion}{\hyperlink{opinion}{\texttt{Analyst Opinion}} }
 \newcommand{\relationships}{\hyperlink{relationship}{\texttt{Analyst Relationships}} }
 \newcommand{\relationship}{\hyperlink{relationship}{\texttt{Analyst Relationship}} }
+\newcommand{\collections}{\hyperlink{collection}{\texttt{Element Collections}} }
+\newcommand{\collection}{\hyperlink{collection}{\texttt{Element Collection}} }
 
 \newcommand{\taggable}{\faicon{tags}\hspace*{0.3em}}
 \newcommand{\distributable}{\faicon{eye-slash}\hspace*{0.3em}}