Add an optional reference to MISP artefacts in Profile 2: Security Incident Response

[sonnyvanlingen]

MISP is used by many CSIRTs and SOCs in different use-cases including to share information on security incidents.

There may be value to provide a way to optionally include a reference to relevant MISP components such as Events, Attributes,Objects, Event Reports.

[tschmidtb51]

I guess that could be done as reference. Do you envision a specific reference sub-category or just mentioning in the profile that this might be helpful? (Might be related to #722)

[tschmidtb51]

When designing this, we need to consider whether we specify a implementation (MISP, STIX, etc.) or a group IoCs and whether it should be mandatory...

[sonnyvanlingen]

For now, I lean towards keeping this reference optional to allow flexibility.