Skip to content

Add FBI most-wanted MISP object template#504

Merged
adulau merged 1 commit intomainfrom
codex/create-misp-object-for-fbi-most-wanted
Apr 9, 2026
Merged

Add FBI most-wanted MISP object template#504
adulau merged 1 commit intomainfrom
codex/create-misp-object-for-fbi-most-wanted

Conversation

@adulau
Copy link
Copy Markdown
Member

@adulau adulau commented Apr 9, 2026

Motivation

  • Provide a MISP object template that models FBI Most Wanted entries (as available from the FBI Wanted API v1) to allow ingestion and sharing of wanted-person metadata.
  • Address the feature request described in issue Create an object template from the most-wanted fbi record #67 by mapping common FBI entry fields (identifiers, biographical descriptors, classification/status, resources) to MISP attributes.

Description

  • Added a new object template at objects/fbi-most-wanted/definition.json which models FBI API v1 fields such as uid, title, legal-name, alias, images, files, publication, modified, field-office, reward-text, and physical descriptors (height, weight, hair, eyes, scars-and-marks).
  • Declared uid and title as required attributes so each instance has a stable identifier and display label.
  • Set meta-category, name, uuid, and version for integration with the misp-objects collection and tuned ui-priority, multiple, and disable_correlation flags for appropriate attributes.
  • Ran the repository formatting/normalization step via ./jq_all_the_things.sh to canonicalize JSON output.

Testing

  • Ran ./jq_all_the_things.sh to normalize JSON formatting and it completed in this environment.
  • Attempted ./validate_all.sh but it did not finish because the validation workflow requires a clean working tree and some helper tools are missing in this environment, so full end-to-end validation did not complete.
  • Attempted jsonschema validation but the jsonschema tool was not available (jsonschema: command not found), so schema validation could not be executed here.

Codex Task

@adulau adulau merged commit 74e982b into main Apr 9, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant