search

BlackPerl-DFIR / SOC-OpenSource

This is a Project Designed for Security Analysts and all SOC audiences who wants to play with implementation and explore the Modern SOC architecture.
Creative Commons Zero v1.0 Universal
610 stars 154 forks source link

Help with TheHive and MISP intigration #6

Open sai-sagar opened 2 years ago

sai-sagar commented 2 years ago

Problem Description When I try to export a case or observables from TheHive to MISP i cant get it working.

Steps to Reproduce.

  1. export case to MISP

    it gives an error as follows

    Capture1

error: CaseExportCtrl: an unexpected error occured while exporting case.

more information...

Capture

also look at my thehive application.conf

play.modules.enabled += org.thp.thehive.connector.misp.MispModule

misp {
   interval: 1m
   servers: [
{
     name = "MISP"
     url = "http://...... MISP URL"
     auth {
       type = key
       key = "---key----"
     }
     wsConfig {}
     wsConfig.ssl.loose.acceptAnyCertificate = true
}
  ]
 }

similar issue to other user

https://github.com/TheHive-Project/TheHive/issues/1063

Pleaae let me know if you can help with this issue, TIA.

loklad commented 2 years ago

I had the same issue while exporting the observables from thehive to MISP, Did you able to solve it?