-
**Problem Description**
When I try to export a case or observables from TheHive to MISP i cant get it working.
**Steps to Reproduce**.
1. export case to MISP
**it gives an error as follows**
…
-
All IoC's are pulling without any changes to base config from misp.tlpWhiteEvent.
When using that prototype, I would expect the miner to only pull in events / IoC's that are tagged as "tlp:white" but…
-
Thanks a lot for the initiative.
Would it be possible to get the IOCs in MISP JSON format? I can do a script to convert all the CSV into MISP but I suppose McAfee has much more context in the origi…
-
Hi,
Appreciate your help to check the below misp error after it was working fine,
Traceback (most recent call last): File "/opt/app-root/lib64/python3.9/site-packages/urllib3/connectionpool.py",…
-
During Hackathon & Training days in Luxembourg in March 2018, we discussed with Andras and Alexandre Dulaunoy about having Sequence Diagrams or other visualization to explain how people work and inter…
-
Hi,
I've been trying to add the MISP-Taxii-Server configuration to my up-and-running Apache MISP server on Ubuntu 20.0.4 LTS.
When I try to do the following:
`taxii-push --path https://localhos…
-
*Please ensure your feature request is not already on the roadmap or associated with an issue. This can be checked [here](https://github.com/orgs/dfir-iris/projects/1/views/4).*
As far as I can tel…
-
**Describe the bug**
I have DFIR IRIS 2.0.2 setup but when i have DFIR query MISP to enrich an IOC the worker errors out.
```
[2023-04-20 18:19:19,592: INFO/MainProcess] Task app.iris_engine.module…
-
Hello,
I've got the same problem using Filebeat threatintel module.
Here is my configuration from `filebeat.yml` (module enabled: AbuseURL, AbuseMalware and misp) :
```
# Module: threatint…
-
### Work environment
| Questions | Answers
|---------------------------|--------------------
| Type of issue | Bug
| OS version (server) | Debian, Ubuntu, CentO…