Skip to content

Add drone-rid-observation MISP object template#507

Merged
adulau merged 1 commit intomainfrom
codex/propose-misp-object-template-for-drone-id
Apr 9, 2026
Merged

Add drone-rid-observation MISP object template#507
adulau merged 1 commit intomainfrom
codex/propose-misp-object-template-for-drone-id

Conversation

@adulau
Copy link
Copy Markdown
Member

@adulau adulau commented Apr 9, 2026

Motivation

  • Provide a concise MISP object to encode direct Remote ID (RID) broadcasts for drones/UAS that covers common US (ASTM/FAA) and EU (EN/Regulatory) use-cases.
  • Support practical observation, triage and correlation without embedding full protocol details, while leaving room for DRIP/identity-assurance hints.

Description

  • Add a new object file objects/drone-rid-observation/definition.json containing telemetry, identity, operational and collection fields for RID observations.
  • Key attributes include observation-time, uas-id, operator-id, session-id, latitude, longitude, altitude-m, speed-mps, heading-deg, rid-standard-profile, broadcast-tech, auth-claim, raw-message, receiver-id, confidence, and comment.
  • Validation constraints require observation-time and at least one of uas-id / operator-id / session-id via requiredOneOf.
  • File includes a stable uuid and version and uses existing MISP attribute types (e.g., float, text, datetime).

Testing

  • Ran a JSON sanity check with jq . objects/drone-rid-observation/definition.json which completed successfully.
  • Ran ./jq_all_the_things.sh which completed and reformatted files but emitted environment warnings (uuidparse: command not found).
  • ./validate_all.sh previously exited non-zero due to the repository validation rule that enforces a clean diff when adding new objects, so that check failed as expected in this workflow.

Codex Task

@adulau adulau merged commit ab0b05f into main Apr 9, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant