MISP V2

Deprecated. Use the MISP v3 integration instead.

Category

Data Enrichment & Threat Intelligence

Pack

MISP

Configuration parameters

• url — MISP server URL (e.g., https://192.168.0.1) (required)
• api_key — API Key (required)
• proxy — Use system proxy settings
• insecure — Trust any certificate (not secure)
• context_select — Select which attribute data fields of the event to save to context. Leave empty to save all attributes.
• attributes_limit — Maximum attributes in the event

Commands (20)

• file — Checks the file reputation of the given hash.
• internal-misp-add-attribute — Adds an attribute to an existing MISP event.
• internal-misp-create-event — Create a new MISP event.
• ip — Checks the reputation of an IP address.
• misp-add-attribute — Adds an attribute to an existing MISP event.
• misp-add-domain-object — Adds a domain object.
• misp-add-email-object — Adds an email object to the specified event ID.
• misp-add-events-from-feed — Adds an OSINT feed.
• misp-add-ip-object — Adds an IP object to the MISP event. The following arguments are optional, but at least one must be supplied for the command to run successfully: "ip", "dst_port", "src_port", "domain", "hostname", "ip_src", and "ip_dst".
• misp-add-object — Adds any other object to MISP.
• misp-add-sighting — Add sighting to an attribute.
• misp-add-tag — Adds a tag to the given UUID event or attribute.
• misp-add-url-object — Adds a URL object to a MISP event.
• misp-create-event — Creates a new MISP event.
• misp-delete-event — Deletes an event according to event ID.
• misp-download-sample — Downloads a file sample from MISP.
• misp-search — Search for events in MISP.
• misp-search-attributes — Search for attributes in MISP.
• misp-upload-sample — Uploads a file sample to MISP.
• url — Checks if the URL is in MISP events.