{
  "context": "This evaluation assesses how well the engineer uses PyMISP to create and manage social media threat intelligence objects. The focus is on proper usage of MISPObject creation, attribute management, and event integration capabilities within the PyMISP library.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "MISPObject Creation",
      "description": "Uses MISPObject class or add_object method to create social media post objects with the appropriate object template (e.g., 'microblog' or generic object creation)",
      "max_score": 25
    },
    {
      "name": "Attribute Addition",
      "description": "Uses add_attribute method on MISPObject to add social media post fields (platform, username, post_text, post_url, timestamp) as object attributes",
      "max_score": 20
    },
    {
      "name": "Embedded Link Handling",
      "description": "Correctly adds embedded URLs as separate attributes within the object using add_attribute, properly handling the list of links",
      "max_score": 10
    },
    {
      "name": "Object Relationships",
      "description": "Uses add_reference or stores reply-to relationships appropriately within the object structure to link related posts",
      "max_score": 10
    },
    {
      "name": "Classification Attributes",
      "description": "Properly sets classification (Informative, Disinformation, etc.) and verification status attributes on the object using appropriate attribute types",
      "max_score": 10
    },
    {
      "name": "Event Integration",
      "description": "Uses PyMISP.add_object method to add the social media object to an existing MISP event, passing both event_id and the object",
      "max_score": 10
    },
    {
      "name": "Event Creation",
      "description": "Uses MISPEvent class and PyMISP.add_event method to create a new event, properly initializing the event with required fields",
      "max_score": 10
    },
    {
      "name": "PyMISP Connection",
      "description": "Properly uses PyMISP class instantiation or accepts a PyMISP connection object as a parameter for API interactions",
      "max_score": 5
    }
  ]
}