HurricaneLabs / machinae

Machinae Security Intelligence Collector
MIT License
502 stars 99 forks source link

add MISP example stanza to machinae.yml #45

Closed emf closed 6 years ago

emf commented 6 years ago

I'd do it myself, but my UID isn't on this particular HL project. ;-)

# misp:
#   name: MISP
#   default: true
#   otypes:
#     - ipv4
#     - url
#     - email
#     - fqdn
#     - hash
#     - hash.sha1
#     - hash.sha256
#   json:
#     request:
#       url: https://***YOUR_MISP_HERE***/events/restSearch/download/{target}/null/null/null/null/7
#       method: get
#       headers:
#         Authorization: ***YOUR_APIKEY_HERE***
#     results:
#       - key: response
#         pretty_name: MISP Events
#         multi_match:
#           keys:
#             - Event.date
#             - Event.id
#             - Event.info
billford commented 6 years ago

This is in my latest branch and will be including in next merge