New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Whitelist of tags for MISP alerts #481

Closed
robertnixon2003 opened this Issue Feb 13, 2018 · 3 comments

Comments

Projects
None yet
4 participants
@robertnixon2003

robertnixon2003 commented Feb 13, 2018

Feature Request

I would like a feature that whitelisted events that go to TheHive from MISP based on a tag or tags.

@saadkadhi saadkadhi added this to the 4.0.0 (Carnica) milestone Feb 17, 2018

@saadkadhi

This comment has been minimized.

Contributor

saadkadhi commented Feb 17, 2018

Currently TheHive, starting from 3.0.4, implements a tag blacklist approach instead of a whitelist one as requested but a whiltelist approach can also be of great interest. What do you think @To-om?

@saadkadhi saadkadhi removed this from the 4.0.0 (Carnica) milestone Jun 13, 2018

@michaelschratt

This comment has been minimized.

michaelschratt commented Sep 11, 2018

A whitelist would be much appreciated. The amount of MISP Events can be very overwhelming. We try to identify only relevant events and want to import those based on whitelist tags.

@saadkadhi

This comment has been minimized.

Contributor

saadkadhi commented Sep 11, 2018

@robertnixon2003 @michaelschratt we hear you. We will strive to implement in the next major version of TheHive (3.2).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment