Misp: Make default tags settings

[yannw]

Would be great if you can make the usage of Taxonomies mandatory within sharing groups.
Example:
Having a sharing group with a dozen others, we agreed on using some Taxonomies (PAP, TLP, custom one, ...)
In case an event get shared without using the tags, set default tags like(for the sake of an example): PAP:RED; TLP:RED; custom:xy

Or as an even more radical approach, not accepting the event if the sender forgets to add the Tags: creator get notified that the information need to be added before a push is possible.

[iglocska]

I've reopened this and closed the other one, my issue wasn't nearly as clear ;)

[adulau]

The idea is to enforce a set of namespace (to be at least tag with a specific) for publishing an event or a template.

[matthijsvp]

This would not just be good for publishing/sharing events, but also for forcing workflow to happen. E.g. it can maybe be mandatory to have a TLP assigned to an event, even before the event is published.

[iglocska]

For sure, this one's pretty high priority.

On Wed, Jan 17, 2018 at 5:01 PM, Matthijs van Polen <
[email protected]> wrote:

This would not just be good for publishing/sharing events, but also for
forcing workflow to happen. E.g. it can maybe be mandatory to have a TLP
assigned to an event, even before the event is published.

—
You are receiving this because you modified the open/close state.
Reply to this email directly, view it on GitHub
https://github.com/MISP/MISP/issues/2067#issuecomment-358351075, or mute
the thread
https://github.com/notifications/unsubscribe-auth/ADf6wGBAmpEKZqYwjdZCRe9wHxK2Kot8ks5tLhlygaJpZM4MieoT
.

[MichaelDwucet]

I would like to revive this issue.
Also for us, this would be important, to enforce a minimum standard of tags that were agreed to be set in our workflow and also for the exchange within certain sharing groups.
Some ideas:
-Minimum standards per sharing group
and / or minimum standard for the whole server.
So you would not be able to publish an event, without having at least set a set of namespace (to be at least tag with a specific). So you can enforce the people to set TLP:XXX on every event.