MISP
/
misp-training
mirror of https://github.com/MISP/misp-training
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [cheatsheet] Added element collection in data-model

pull/25/head
Sami Mokaddem 2024-04-12 09:38:05 +02:00
parent feaa6a9bd3
commit a84e06b134
No known key found for this signature in database
GPG Key ID: 164C473F627A06FA
2 changed files with 17 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
cheatsheets/cheatsheet-data-model.tex
View File

@ -140,17 +140,9 @@
\newpage \newpage
% Creates a box with a label taking 1/3 of the available width
% arg1[optional] = icon
% arg2[optional] = purpose
% arg3[optional] = usecase
% arg4[optional] = actions
% arg5[optional] = description
% arg6 = title
% arg7 = content
\begin{multicols*}{3} \begin{multicols*}{3}
% Analyst Note % Analyst Note
\cheatbox[\faicon{sticky-note}] \cheatbox[\faicon{sticky-note}]
[Share and add an analysis to any MISP data] [Share and add an analysis to any MISP data]
[Describe information about specific details, annotate elements] [Describe information about specific details, annotate elements]
[\distributable \synchronisable] [\distributable \synchronisable]
@ -162,8 +154,8 @@
$\blacktriangleright$ The note is actually attached to the target's UUID $\blacktriangleright$ The note is actually attached to the target's UUID
} }
% Analyst Opinion % Analyst Opinion
\cheatbox[\faicon{gavel}] \cheatbox[\faicon{gavel}]
[Share and add an opinion to any MISP data] [Share and add an opinion to any MISP data]
[Provide feedback to third-parties, Coordinate and Collaborate] [Provide feedback to third-parties, Coordinate and Collaborate]
[\distributable \synchronisable] [\distributable \synchronisable]
@ -174,8 +166,8 @@
$\blacktriangleright$ The numerical value of the \opinion is $\in [0, 100]$. where $50$ is the neutral point. Any values $<50$ are considered negatives, values $>50$ are considered positives. $\blacktriangleright$ The numerical value of the \opinion is $\in [0, 100]$. where $50$ is the neutral point. Any values $<50$ are considered negatives, values $>50$ are considered positives.
} }
% Analyst Relationship % Analyst Relationship
\cheatbox[\faicon{arrow-up}] \cheatbox[\faicon{arrow-up}]
[Create a relationship between elements] [Create a relationship between elements]
[Manually create correlation link, add similarities] [Manually create correlation link, add similarities]
[\distributable \synchronisable] [\distributable \synchronisable]
@ -186,4 +178,14 @@
$\blacktriangleright$ Example could be an \event $\rightarrow$ \event relationship where one is \textit{Suspected to be part of the same campaign based on HUMINT sources} $\blacktriangleright$ Example could be an \event $\rightarrow$ \event relationship where one is \textit{Suspected to be part of the same campaign based on HUMINT sources}
} }
% Element Collection
\cheatbox[\faicon{object-group}]
[Allow groupping multiple elements into a single collection]
[Grouping \events together if they are part of the same campaing]
[\distributable]
[Group element into collection]
{\linkdest{collection}Element Collection}
{
}
\end{multicols*} \end{multicols*}

2
cheatsheets/utils.tex
View File

@ -31,6 +31,8 @@
\newcommand{\opinion}{\hyperlink{opinion}{\texttt{Analyst Opinion}} } \newcommand{\opinion}{\hyperlink{opinion}{\texttt{Analyst Opinion}} }
\newcommand{\relationships}{\hyperlink{relationship}{\texttt{Analyst Relationships}} } \newcommand{\relationships}{\hyperlink{relationship}{\texttt{Analyst Relationships}} }
\newcommand{\relationship}{\hyperlink{relationship}{\texttt{Analyst Relationship}} } \newcommand{\relationship}{\hyperlink{relationship}{\texttt{Analyst Relationship}} }
\newcommand{\collections}{\hyperlink{collection}{\texttt{Element Collections}} }
\newcommand{\collection}{\hyperlink{collection}{\texttt{Element Collection}} }
\newcommand{\taggable}{\faicon{tags}\hspace*{0.3em}} \newcommand{\taggable}{\faicon{tags}\hspace*{0.3em}}
\newcommand{\distributable}{\faicon{eye-slash}\hspace*{0.3em}} \newcommand{\distributable}{\faicon{eye-slash}\hspace*{0.3em}}