Skip to content

Commit

Permalink
fix integer and add task/event 'performed-by' identity relationships
Browse files Browse the repository at this point in the history
  • Loading branch information
rpiazza committed Mar 25, 2024
1 parent c822f07 commit 4f74c31
Showing 1 changed file with 13 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -130,7 +130,7 @@ The values of this property *SHOULD* come from the [stixtype]#<<incident-investi
|[stixtype]#{int_url}[integer]#

|The criticality of the incident.
If present, this value *MUST* be between 0 to 100. This can be translated into qualitative values as described in <<appendix-b,Appendix B>>.
If present, this value *MUST* be an integer between 0 to 100. This can be translated into qualitative values as described in <<appendix-b,Appendix B>>.

|*detection_methods* (optional)
|[stixtype]#{list_url}[list]# of type [stixtype]#{open_vocab_url}[open-vocab]#
Expand Down Expand Up @@ -445,6 +445,11 @@ For example, a dropper running led to a ransomware tool to be downloaded and run
|[stixtype]#{location_url}[location]#
|The event occurred at a specific location.

|[stixtype]#<<event,event>>#
|[stixrelationship]#performed-by#
|[stixtype]#{identity_url}[identity]#
|The event was performed by the identity.

// relationships:end
|===

Expand Down Expand Up @@ -546,7 +551,7 @@ This *MUST* match an extension that provides greater details of a specific type

|*criticality* (optional)
|[stixtype]#{int_url}[integer]#
|The criticality of this impact. If present, this value *MUST* be between 0 to 100.
|The criticality of this impact. If present, this value *MUST* be an integer between 0 to 100.
This can be translated into qualitative values as described in <<appendix-b,Appendix B>>.

|*description* (optional)
Expand Down Expand Up @@ -1118,6 +1123,12 @@ Using these embedded relationships ensures that an incomplete sequence cannot be
|[stixtype]#{location_url}[location]#
|The task occurred at a specific location.


|[stixtype]#<<task,task>>#
|[stixrelationship]#performed-by#
|[stixtype]#{identity_url}[identity]#
|The task was performed by the identity.

// relationships:end
|===

Expand Down

0 comments on commit 4f74c31

Please sign in to comment.