{
    "format" : "jb-book",
    "root" : "intro",
    "parts" : [
        {
            "caption" : "Data Dictionaries",
            "chapters": [
                {
                    "file": "dd/intro"
                },
                {
                    "file": "dd/guidelines/intro",
                    "sections": [
                        {
                            "file": "dd/guidelines/contributing_data_dictionaries"
                        },
                        {
                            "file": "dd/guidelines/authoring_data_dictionaries"
                        }
                    ]
                },
                {
                    "file": "dd/notebooks/intro",
                    "sections": [
                        {
                            "file": "dd/notebooks/security_events_correlation"
                        }
                    ]
                }
            ]
        },
        {
            "caption": "Common Data Model",
            "chapters": [
                {
                    "file": "cdm/intro"
                },
                {
                    "file": "cdm/guidelines/intro",
                    "sections": [
                        {
                            "file": "cdm/guidelines/entity_structure"
                        },
                        {
                            "file": "cdm/guidelines/table_structure"
                        },
                        {
                            "file": "cdm/guidelines/data_types"
                        },
                        {
                            "file": "cdm/guidelines/domain_or_hostname_or_fqdn"
                        }
                    ]
                },
                {
                    "file": "cdm/entities/intro",
                    "sections": []
                },
                {
                    "file": "cdm/tables/intro",
                    "sections": []
                }
            ]
        },
        {
            "caption": "Detection Model",
            "chapters": [
                {
                    "file": "dm/intro"
                },
                {
                    "file": "dm/ossem_relationships_to_events"
                },
                {
                    "file": "dm/mitre_attack/intro",
                    "sections": [
                        {
                            "file": "dm/mitre_attack/attack_techniques_to_events"
                        },
                        {
                            "file": "dm/mitre_attack/attack_ds_events_mappings"
                        }
                    ]
                }
            ]
        }
    ]
}