MISP Analyzer #14
Labels
scope:analyzer
Issue is analyzer related
Milestone
Comments
|
@3c7 proposed to provide this analyzer. |
|
@3c7 If you are haven't started working on this analyzer, please drop it as @ant1 created one already and we are currently reviewing it. But if it's too late, that is just fine. We'll consider your pull request and compare both analyzers to add any useful features @ant1 might have missed. Sorry for any inconvenience. |
|
@saadkadhi It's already in use here. ;) I will upload all of my analyzers to our repo then we're able to choose what to include in this one. :) |
nadouani
pushed a commit
that referenced
this issue
Mar 23, 2017
nadouani
added a commit
that referenced
this issue
Mar 23, 2017
nadouani
added a commit
that referenced
this issue
Mar 24, 2017
jeromeleonard
added a commit
that referenced
this issue
Jun 8, 2017
viviandsilva
pushed a commit
to viviandsilva/Cortex-Analyzers
that referenced
this issue
Sep 2, 2021
* add IDS detection information * report alerts * return 'No alerts available' when that is the case * only add alerts if they are available * return ids_detections only if available Co-authored-by: Dan Prantl <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Request Type
Analyzer Request
Work Environment
NA
Analyzer Description
Create an analyzer that can query one or several MISP instances.
The analyzer must be able to ingest observables, query MISP instances and provide the number of events where the observable can be found as a short report. The long analyzer report should contain useful metadata about the associated events if any and hyperlinks to access them.
Additional Information
TheHive should be able to preview and import the events of interest once this analyzer is executed.
The text was updated successfully, but these errors were encountered: