Rename one of the two 'Tool' galaxies (tool.json / mitre-tool.json)...

[StefanKelm]

...to avoid confusion when adding a galaxy to an event...

[adulau]

@Delta-Sierra what do you think?

[SteveClement]

I had the same confusing moment earlier on, would be interesting to handle. Please.

Bump @Delta-Sierra

[SteveClement]

@Delta-Sierra ?

[Delta-Sierra]

Hm... To be honest I never had this confusion but this is conceivable.

To stay consistent with the source, I think we need to keep the name "mitre-tool.json" (because I believe renaming it "tool-mitre" would not solve the issue), so the only name we can change is "tool.json", but I may not have a better name in mind right now... If anyone as a suggestion...?

[cvandeplas]

I agree we should not change mitre-tool.json.

On the other hand renaming tool.json with a prefix would also imply renaming all the other ones like threat-actor.json, botnet.json to follow the same convention as the tool.json file.

The tool.json file contains the following:

"description": "threat-actor-tools is an enumeration of tools used by adversaries. The list includes malware but also common software regularly used by the adversaries.",

Perhaps a rename to threat-actor-tools could be an option? On the other hand, the threat-actor text is a bit redundant for such a repository ...

I don't have other ideas at the moment.