MISP V2 Deprecated

Deprecated. Use the MISP v3 integration instead.

Data Enrichment & Threat Intelligence · MISP

Configuration parameters

  • url — MISP server URL (e.g., https://192.168.0.1) (required)
  • api_key — API Key (required)
  • proxy — Use system proxy settings
  • insecure — Trust any certificate (not secure)
  • context_select — Select which attribute data fields of the event to save to context. Leave empty to save all attributes.
  • attributes_limit — Maximum attributes in the event

Commands (20)

  • file

    Checks the file reputation of the given hash.

  • internal-misp-add-attribute Deprecated

    Adds an attribute to an existing MISP event.

  • internal-misp-create-event Deprecated

    Create a new MISP event.

  • ip

    Checks the reputation of an IP address.

  • misp-add-attribute

    Adds an attribute to an existing MISP event.

  • misp-add-domain-object

    Adds a domain object.

  • misp-add-email-object

    Adds an email object to the specified event ID.

  • misp-add-events-from-feed

    Adds an OSINT feed.

  • misp-add-ip-object

    Adds an IP object to the MISP event. The following arguments are optional, but at least one must be supplied for the command to run successfully: "ip", "dst_port", "src_port", "domain", "hostname", "ip_src", and "ip_dst".

  • misp-add-object

    Adds any other object to MISP.

  • misp-add-sighting

    Add sighting to an attribute.

  • misp-add-tag

    Adds a tag to the given UUID event or attribute.

  • misp-add-url-object

    Adds a URL object to a MISP event.

  • misp-create-event

    Creates a new MISP event.

  • misp-delete-event

    Deletes an event according to event ID.

  • misp-download-sample

    Downloads a file sample from MISP.

  • misp-search

    Search for events in MISP.

  • misp-search-attributes

    Search for attributes in MISP.

  • misp-upload-sample

    Uploads a file sample to MISP.

  • url

    Checks if the URL is in MISP events.