Is 'all_indicators' option replaced by '--indicators'?

CrowdStrike / MISP-tools

Import CrowdStrike Threat Intelligence into your instance of MISP

MIT License

40 stars 10 forks source link

Is 'all_indicators' option replaced by '--indicators'? #66

Closed cudeso closed 1 year ago

cudeso commented 1 year ago

Hello,

In the older versions (cs-misp-importer-beta-release-4 etc) there used to be an option all_indicators, allowing you to import all indicators, regardless if they are related to a report or not. I don't see that option in the latest version(s). Is this replaced with --indicators?

kind regards,

koen

jshcodes commented 1 year ago

Hi @cudeso -

That is correct! You can use -i or --indicators to import indicator data. (You can also achieve this using the --all argument, but this will import adversaries and reports first.)