diff --git a/taxonomies.html b/taxonomies.html index 005eabd..3d0c7b2 100755 --- a/taxonomies.html +++ b/taxonomies.html @@ -486,6 +486,7 @@ body.book #toc,body.book #preamble,body.book h1.sect0,body.book .sect1>h2{page-b
+ + | ++workflow namespace available in JSON format at this location. The JSON format can be freely reused in your application or automatically enabled in MISP taxonomy. + | +
Workflow support language is a common language to support intelligence analysts to perform their analysis on data and information.
+Todo are the actions to be performed by one or more analyst(s) to apply cognitive methods, evaluation(s), weightening information, to validate hypothesis or complete additional tasks to improve the overall information or data being tagged with a todo.
+Expansion need to be applied to expand the information tagged
+Additional review is required to reach a certain level of validation of the information tagged
+Review is required before publishing the information tagged
+Review the the information tagged to limit the number of false-positives and potentially remove any IDS/automation flag to avoid automation of the false-positives
+Add potential MISP galaxy cluster values missing about the information tagged
+Create missing MISP galaxy cluster about the information tagged
+Add contextual information about the information tagged
+Add adequate tagging and classification about the information tagged
+Check Passive DNS (or similar techniques) to review if the information tagged is used within shared hosting
+Review the classification of the information tagged to ensure adequate marking of the information before publication
+Review the grammar of the information tagged to improve the overall quality
+State are the different states of the information or data being tagged.
+Incomplete means that the information tagged is incomplete and has potential to be completed by other analysts, technical processes or the current analysts performing the analysis
+Complete means that the information tagged reach a state of completeness with the current capabilities of the analyst
+Analysts relying on taxonomies don’t always know the appropriate namespace to use but know which value to use for classification. The MISP mapping taxonomy allows to map a single classification into a series of machine-tag synonyms.
@@ -20456,7 +20567,7 @@ vocabulaire-des-probabilites-estimatives namespace available in JSON format at <