-
Notifications
You must be signed in to change notification settings - Fork 1.4k
CortexIntegration
Alexandre Dulaunoy edited this page May 2, 2017
·
1 revision
During the hackathon, we had a discussion about the steps of integrating Cortex in MISP and allow the use of it:
- (1) first step is to create an attribute type called
cortex
to include the JSON object returned by Cortex in MISP - (1) A new MISP Cortex module will be created to expose Cortex services into MISP
This is the first stage of integrating Cortex. In this case, the MISP module will do the async request to Cortex and response back to MISP to allow the proposal of attributes.
Second step will be to support the async interface in MISP directly. Where Cortex exposes a misp-module like interface then MISP will need to support a full async.