search

MISP / misp-modules

Modules for expansion services, enrichment, import and export in MISP and other tools.
http://misp.github.io/misp-modules
GNU Affero General Public License v3.0
345 stars 234 forks source link

csvimport support #611

Open amrroq opened 1 year ago

amrroq commented 1 year ago

I've been trying to piece together details from various resources on how to use the csvimport module but I'm hoping someone with more experience can help me out. I'm unsure how to query it using the API--I've enabled the module and everything and get a list of modules returned from http://127.0.0.1:6666/modules, so the module should be working. Specifically, I'm unsure of the syntax that the module is expecting to receive....do I just format it the way the userConfig object is formatted in csvimport.py? Or do I edit csvimport.py directly and put the header values in there? Also, from what I've read it sounds like I should be able to see/use this module in the Web UI....? But when I go to Events Actions > Add Event > Import from... there is no option for csv.

Screen Shot 2023-05-15 at 12 50 35 PM

Ubuntu 20.04.6 LTS

MISP 2.4.168

PyMISP 2.4.157

Python 3.8.10

I also just updated misp-modules per these instructions: https://github.com/MISP/misp-book/tree/main/updating-python#updating-misp-modules

TIA

adulau commented 1 year ago

Import module are available for an event. You need first to create an event and then go to the import. There you'll find all the import modules available in MISP.

amrroq commented 1 year ago

Ahhhh, I see it now. Thank you!

Do you also have any guidance or a link you could point me to for how to properly format an API call to the csvimport module?