From 873eb032fb0e77fbad3ccff80a23fc39b78b2d28 Mon Sep 17 00:00:00 2001 From: Desiree Beck Date: Mon, 12 Aug 2019 15:20:03 -0400 Subject: [PATCH] add text to faq --- yfaq/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/yfaq/README.md b/yfaq/README.md index 87a6bfb..4476ffc 100644 --- a/yfaq/README.md +++ b/yfaq/README.md @@ -122,7 +122,7 @@ For example, a [GotBotKR](https://github.com/MBCProject/mbc-markdown/blob/master ### How are MBC behaviors, possibly at different levels of abstraction, associated? ### -MBC does not define relationships between behaviors, so association of behaviors must be done at the reporting level. The [GotBotKR](https://github.com/MBCProject/mbc-markdown/blob/master/xample-malware/gotbotkr.md)] example directly above is a good example of how multiple (three) behaviors can be associated by the human-oriented text, "The malware installs two instances of itself on the system. The second instance (watchdog) monitors whether the first instance is still active and reinstalls it if it has been removed from the system" [[2]](#2). +MBC does not define relationships between behaviors, so association of behaviors must be done at the reporting level. The [GotBotKR](https://github.com/MBCProject/mbc-markdown/blob/master/xample-malware/gotbotkr.md) example directly above is a good example of how multiple (three) behaviors can be associated by the human-oriented text, "The malware installs two instances of itself on the system. The second instance (watchdog) monitors whether the first instance is still active and reinstalls it if it has been removed from the system" [[2]](#2). ### How should information in the Methods section be used? ###