I use the export function from TheHive to MISP for some IOCs, however, I have also configured the import of TheHive IOCs. So when an IOC from TheHive is exported to MISP, it is then imported into TheHive!
With the filter functions, I cannot filter these cases because the organization is the same for TheHive and MISP, it could be filtered with the events published or not, which would make it possible to change the type of distribution but these two filters do not don't exist I believe.
Hello,
I use the export function from TheHive to MISP for some IOCs, however, I have also configured the import of TheHive IOCs. So when an IOC from TheHive is exported to MISP, it is then imported into TheHive!
With the filter functions, I cannot filter these cases because the organization is the same for TheHive and MISP, it could be filtered with the events published or not, which would make it possible to change the type of distribution but these two filters do not don't exist I believe.
Anyone have a solution?