Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

MISP parser: added functionality to honor/filter the "to_ids" attribute of MISP #1649

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from
Open

MISP parser: added functionality to honor/filter the "to_ids" attribute of MISP #1649

wants to merge 1 commit into from

Commits on Nov 4, 2020

  1. Added the following to honor the "to_ids" attribute of MISP: 

    * added the new field "misp.to_ids" to harmonization.conf (Boolean)
* added the new parameter "only_ids" to the MISP parser
* MISP parser now inserts the MISP attribute "to_ids" into the resulting IntelMQ events
* When parameter "only_ids" is set to "true", the MISP parser only processes and forwards MISP events if their "to_ids" attribute's value is true
    @DK1MI
    DK1MI committed Nov 4, 2020
    Configuration menu
    Copy the full SHA
    19f7b1a View commit details
    Browse the repository at this point in the history