new: allow user to enrich objects

[righel]

What does it do?

Allow enriching objects. misp-modules can handle objects and can define which template name or uuid applies to certain objects.

When defining your misp-module you can add an object template name as input to the mispattributes dictionary, example:

mispattributes = {
    'input': ['sigmf-recording'],
    'output': [
        'MISP objects'
    ],
    'format': 'misp_standard'
}

sigmf-recording is a object template name, when click on the enrichment icon () in the object envelop, MISP will propose a list of possible enrichments that match that object template:

For accessing the full object in the misp-module, you can do the following:

def handler(q=False):
    request = json.loads(q)
    object = request.get("object")
    ...

Questions

• Does it require a DB change?
• Are you using it in production?
• Does it require a change in the API (PyMISP for example)?