mirror of https://github.com/MISP/misp-training
chg: [cheatsheet] Added element collection in data-model
parent
feaa6a9bd3
commit
a84e06b134
|
@ -140,17 +140,9 @@
|
|||
|
||||
\newpage
|
||||
|
||||
% Creates a box with a label taking 1/3 of the available width
|
||||
% arg1[optional] = icon
|
||||
% arg2[optional] = purpose
|
||||
% arg3[optional] = usecase
|
||||
% arg4[optional] = actions
|
||||
% arg5[optional] = description
|
||||
% arg6 = title
|
||||
% arg7 = content
|
||||
\begin{multicols*}{3}
|
||||
% Analyst Note
|
||||
\cheatbox[\faicon{sticky-note}]
|
||||
\cheatbox[\faicon{sticky-note}]
|
||||
[Share and add an analysis to any MISP data]
|
||||
[Describe information about specific details, annotate elements]
|
||||
[\distributable \synchronisable]
|
||||
|
@ -162,8 +154,8 @@
|
|||
$\blacktriangleright$ The note is actually attached to the target's UUID
|
||||
}
|
||||
|
||||
% Analyst Opinion
|
||||
\cheatbox[\faicon{gavel}]
|
||||
% Analyst Opinion
|
||||
\cheatbox[\faicon{gavel}]
|
||||
[Share and add an opinion to any MISP data]
|
||||
[Provide feedback to third-parties, Coordinate and Collaborate]
|
||||
[\distributable \synchronisable]
|
||||
|
@ -174,8 +166,8 @@
|
|||
$\blacktriangleright$ The numerical value of the \opinion is $\in [0, 100]$. where $50$ is the neutral point. Any values $<50$ are considered negatives, values $>50$ are considered positives.
|
||||
}
|
||||
|
||||
% Analyst Relationship
|
||||
\cheatbox[\faicon{arrow-up}]
|
||||
% Analyst Relationship
|
||||
\cheatbox[\faicon{arrow-up}]
|
||||
[Create a relationship between elements]
|
||||
[Manually create correlation link, add similarities]
|
||||
[\distributable \synchronisable]
|
||||
|
@ -186,4 +178,14 @@
|
|||
$\blacktriangleright$ Example could be an \event $\rightarrow$ \event relationship where one is \textit{Suspected to be part of the same campaign based on HUMINT sources}
|
||||
}
|
||||
|
||||
% Element Collection
|
||||
\cheatbox[\faicon{object-group}]
|
||||
[Allow groupping multiple elements into a single collection]
|
||||
[Grouping \events together if they are part of the same campaing]
|
||||
[\distributable]
|
||||
[Group element into collection]
|
||||
{\linkdest{collection}Element Collection}
|
||||
{
|
||||
}
|
||||
|
||||
\end{multicols*}
|
||||
|
|
|
@ -31,6 +31,8 @@
|
|||
\newcommand{\opinion}{\hyperlink{opinion}{\texttt{Analyst Opinion}} }
|
||||
\newcommand{\relationships}{\hyperlink{relationship}{\texttt{Analyst Relationships}} }
|
||||
\newcommand{\relationship}{\hyperlink{relationship}{\texttt{Analyst Relationship}} }
|
||||
\newcommand{\collections}{\hyperlink{collection}{\texttt{Element Collections}} }
|
||||
\newcommand{\collection}{\hyperlink{collection}{\texttt{Element Collection}} }
|
||||
|
||||
\newcommand{\taggable}{\faicon{tags}\hspace*{0.3em}}
|
||||
\newcommand{\distributable}{\faicon{eye-slash}\hspace*{0.3em}}
|
||||
|
|
Loading…
Reference in New Issue