Join GitHub today
GitHub is home to over 31 million developers working together to host and review code, manage projects, and build software together.Sign up
MISP - Add an Event Tag instead of/additionnally to Attribute Tag #836
In the MISP section of the application.conf, I found "optional tags to add to each observable imported from an event available on this instance" and using:
I would like to request a feature to also add an event tag, additionnally to the TLP tag.
Again, thanks for your great work.
Hello, you can define a case template to use when importing MISP alerts into cases, and set set the tags you want to that case template.
When you convert a MISP alert to a Case, the tags from the Case Template will be appended to the newly created case, allowing you to filter the case by that tag to find all the cases created from a MISP alert.
Hello, Happy New Year guys :-)
Does it make sense for you?