Bulk Import of Stix Observables

MISP / MISP-Taxii-Server

An OpenTAXII Configuration for MISP

BSD 3-Clause "New" or "Revised" License

80 stars 30 forks source link

Bulk Import of Stix Observables #77

Open healthrage opened 5 years ago

healthrage commented 5 years ago

Hello! I am working on setting up the MISP-Taxii-Server with another taxii server and it looks like when I pull observables each separate one gets put into its own event. Is there a way to set the server to lump each pull from a single taxii server into one event?

arcsector commented 4 years ago

I think this is the default way that MISP events are designed to be displayed... I don't think you can change this behavior by MISP. The code is already uploading the STIX observables as a MISP package, they just happen to be displayed in MISP as separate events.