Skip to content
Another MISP module for Python
Python
Branch: master
Clone or download

Latest commit

Fetching latest commit…
Cannot retrieve the latest commit at this time.

Files

Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
.github/workflows
doc
mispy
.gitignore
.travis.yml
LICENCE
README.md
misp_test.py
requirements.txt
setup.py

README.md

python-misp

Documentation built Continuous integration

A pythonic MISP module.

API Documentation and unit-tests are available.

Examples

Get attributes and tags from an event:

server = MispServer(url=URL, apikey=APIKEY)
event = server.events.get(42)
for attr in event.attributes:
    print("%s %s %s" % (attr.category, attr.type, attr.value))
    if attr.type == 'malware-sample':
        server.download(attr)
for tag in event.tags:
    print("%s" % tag.name)

Add a new attribute to an event

server = MispServer(url=URL, apikey=APIKEY)
event = server.events.get(42)
new_attr = MispAttribute()
new_attr.value = "127.0.0.1"
new_attr.category = "Network activity"
new_attr.type = "ip-dst"
new_attr.comment = "Dope IOC"
new_attr.to_ids = True
event.attributes.add(new_attr)
server.events.update(event)

Search for an attribute

server = MispServer(url=URL, apikey=APIKEY)
events = server.attributes.search(value="087bffa8a570079948310dc9731c5709")
for event in events:
    print("%i - %s" % (event.id, event.info))

Credits

Airbus Group CERT

You can’t perform that action at this time.