Add Object
Add an object to an event.
External Documentation
To learn more, visit the MISP documentation.
Parameters
Parameter | Description |
---|---|
Attribute | Attributes of the object. Example: <br/>[<br/> {<br/> "category": "Internal reference",<br/> "value": "127.0.0.1",<br/> "to_ids": true,<br/> "disable_correlation": false,<br/> "distribution": "0",<br/> "comment": "logged source ip",<br/> "object_relation": "sensor"<br/> }<br/>]<br/> |
Event ID | UUID or numeric ID of the event. Can be obtained by using the List Events action. |
Object Template ID | UUID Or numeric ID of the object template. |
Example Output
{
"Object": {
"id": "12345",
"name": "ail-leak",
"meta-category": "string",
"description": "string",
"template_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"template_version": "1",
"event_id": "12345",
"uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"timestamp": "1617875568",
"distribution": "0",
"sharing_group_id": "1",
"comment": "string",
"deleted": true,
"first_seen": "1581984000000000",
"last_seen": "1581984000000000",
"Attribute": [
{
"id": "12345",
"event_id": "12345",
"object_id": "12345",
"object_relation": "sensor",
"category": "Internal reference",
"type": "md5",
"value": "127.0.0.1",
"to_ids": true,
"uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"timestamp": "1617875568",
"distribution": "0",
"sharing_group_id": "1",
"comment": "logged source ip",
"deleted": false,
"disable_correlation": false,
"first_seen": "1581984000000000",
"last_seen": "1581984000000000"
}
]
}
}
Workflow Library Example
Add Object with Misp and Send Results Via Email
Preview this Workflow on desktop