The Incident Detection Message Exchange Format version 2 (IDMEFv2) is a universal format to describe any events and incidents detected on cyber and/or physical infrastructures.
The format is agnostic so it can be used in stand-alone or combined cyber (SIEM), physical (PSIM) and availability (NMS) monitoring architectures. IDMEFv2 can also be used to describe natural and man-made hazards threats and incidents.
This IDMEFv2 GitHub hosts documentation, the official IETF Internet Drafts and technical tools and librairies for testing/implementing.
The format is still in definition stage. More information on : https://www.idmefv2.org
Tools :
-
Online IDMEFv2 JSON file Validator: A tool to validate IDMEFv2 JSON files. Essential to tune your own JSON files.
-
IDMEFv2 JSON Schema: A JSON Schema for IDMEFv2 message validation.
Python librairies :
-
IDMEFv2 format python library: A Python library for parsing, handling, and generating JSON IDMEFv2 messages.
-
IDMEFv2 transport python library: A Python library that provides various transport implementations to exchange IDMEFv2 messages.
Java librairies :
-
IDMEFv2 format java library: A Java library for serializing, deserializing and validating JSON IDMEFv2 messages.
-
IDMEFv2 transport java library: A Java library for transporting IDMEFv2 messages over HTTPs.
Swift librairies :
-
IDMEFv2 format swift library: A swift library for serializing, deserializing and validating JSON IDMEFv2 messages.
-
IDMEFv2 transport swift library: A swift library for transporting IDMEFv2 messages over HTTPs.
