Thank you for the contribution. It's now merged in the default repository.
Some remarks:
To make the JSON valid, you need to pass it via jq before doing the pull-request
In your current taxonomy, you use namespace:predicate only and not namespace:predicate=value. If you want to extend the taxonomy later, I would advice to move the current value into a "type" predicate such csirt-americas:type="defacement". It would allow you have to have more flexibility in the future.
Thank you for the contribution. It's now merged in the default repository.
Some remarks:
jqbefore doing the pull-request