search

MISP / PyMISP

Python library using the MISP Rest API
Other
446 stars 280 forks source link

Is it possible to get the number of sightings for an attribute? #91

Closed bdenning closed 5 years ago

bdenning commented 7 years ago

I can see a number of methods available here: https://github.com/MISP/PyMISP/blob/master/pymisp/api.py#L1122

but all appear to add a sighting to an attribute, I can't find any obvious way in PyMISP to get the number of sightings for a given attribute (both positive and false-positive).

If it's not currently possible to do so, could someone just confirm that's the case?

cudeso commented 5 years ago

You can use search_sightings(context='attribute', context_id=attribute_id)