Add Object

Add an object to an event.

External Documentation

To learn more, visit the MISP documentation.

Parameters

Parameter	Description
Attribute	Attributes of the object.Example: [ { "category": "Internal reference", "value": "127.0.0.1", "to_ids": true, "disable_correlation": false, "distribution": "0", "comment": "logged source ip", "object_relation": "sensor" }]
Event ID	UUID or numeric ID of the event. Can be obtained by using the List Events action.
Object Template ID	UUID Or numeric ID of the object template.

Example Output

{
    "Object": {
        "id": "12345",
        "name": "ail-leak",
        "meta-category": "string",
        "description": "string",
        "template_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
        "template_version": "1",
        "event_id": "12345",
        "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
        "timestamp": "1617875568",
        "distribution": "0",
        "sharing_group_id": "1",
        "comment": "string",
        "deleted": true,
        "first_seen": "1581984000000000",
        "last_seen": "1581984000000000",
        "Attribute": [
            {
                "id": "12345",
                "event_id": "12345",
                "object_id": "12345",
                "object_relation": "sensor",
                "category": "Internal reference",
                "type": "md5",
                "value": "127.0.0.1",
                "to_ids": true,
                "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
                "timestamp": "1617875568",
                "distribution": "0",
                "sharing_group_id": "1",
                "comment": "logged source ip",
                "deleted": false,
                "disable_correlation": false,
                "first_seen": "1581984000000000",
                "last_seen": "1581984000000000"
            }
        ]
    }
}

Workflow Library Example

Add Object with Misp and Send Results Via Email

Preview this Workflow on desktop