search

CrowdStrike / MISP-tools

Import CrowdStrike Threat Intelligence into your instance of MISP
MIT License
42 stars 10 forks source link

'indicators_tags' are not being asserted on Indicator Events or Indicators #116

Closed packet-rat closed 1 year ago

packet-rat commented 1 year ago

'indicators_tags' are not being asserted on Indicator Events or Indicators

; Standard local tags
; You can add additional tags here, and they will be appended to each event created
; Example: reports_tags = ${CrowdStrike:reports_unique_tag},My_Custom_Tag_1,My_Custom_Tag_2

indicators_tags = att:source="Crowdstrike.Indicators"

image

jshcodes commented 1 year ago

Here is where it should be happening...

Will dig into this as part of the next revision.