search

MISP / misp-playbooks

MISP Playbooks
https://misp.github.io/misp-playbooks/
BSD 2-Clause "Simplified" License
174 stars 16 forks source link

[bug] pb_using_timestamps_in_MISP incorrect publish_timestamp filtering #54

Open righel opened 2 months ago

righel commented 2 months ago

In the timestamps playbook: https://github.com/MISP/misp-playbooks/blob/main/misp-playbooks/pb_using_timestamps_in_MISP-with_output.ipynb

Section: Use REST API to search for published events on an exact date json={"returnFormat":"json", "publish_timestamp":"2023-07-07", "published":"1"}

The publish_timestamp filter is not working as expected with the YYYY-MM-DD format, it has to be in timestamp format.

cudeso commented 2 months ago

Good catch! I'll update the playbook soon.