Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Export to MISP: add TLP #314

Closed
garanews opened this issue Sep 20, 2017 · 0 comments
Closed

Export to MISP: add TLP #314

garanews opened this issue Sep 20, 2017 · 0 comments
Assignees

Comments

@garanews
Copy link
Contributor

Request Type

Add TLP support when exporting cases to MISP

Problem Description

When exporting cases to MISP the TLPs set in The Hive (over the case and the attributes) are not replicated in MISP.
MISP supports the TLP through the Taxonomy Library: tlp
That contains the unique values:
image

Steps to Reproduce

Send a case to MISP

Possible Solutions

Through the function get_tags(misp) from pymisp is possible to retrieve the tag id needed for set the tlp in MISP
image

It should be possible obtain the id also through the REST API accessing to
/tags/index.json
image

so to /tags/index
post {"filter":"tlp:red"}
will get back the tlp:red matching tags ( thanks @iglocska )

@nadouani nadouani added this to the 3.0.0 milestone Sep 20, 2017
@To-om To-om closed this as completed Oct 19, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants