To learn more, visit the MISP documentation.

Parameters

ParameterDescription
AttributeAttributes of the object.Example:[ { "category": "Internal reference", "value": "127.0.0.1", "to_ids": true, "disable_correlation": false, "distribution": "0", "comment": "logged source ip", "object_relation": "sensor" }]
Event IDUUID or numeric ID of the event. Can be obtained by using the List Events action.
Object Template IDUUID Or numeric ID of the object template.

Example Output

{    "Object": {        "id": "12345",        "name": "ail-leak",        "meta-category": "string",        "description": "string",        "template_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",        "template_version": "1",        "event_id": "12345",        "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",        "timestamp": "1617875568",        "distribution": "0",        "sharing_group_id": "1",        "comment": "string",        "deleted": true,        "first_seen": "1581984000000000",        "last_seen": "1581984000000000",        "Attribute": [            {                "id": "12345",                "event_id": "12345",                "object_id": "12345",                "object_relation": "sensor",                "category": "Internal reference",                "type": "md5",                "value": "127.0.0.1",                "to_ids": true,                "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",                "timestamp": "1617875568",                "distribution": "0",                "sharing_group_id": "1",                "comment": "logged source ip",                "deleted": false,                "disable_correlation": false,                "first_seen": "1581984000000000",                "last_seen": "1581984000000000"            }        ]    }}

Workflow Library Example

Add Object with Misp and Send Results Via Email

Preview this Workflow on desktop