Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Bug] MISP sync delete existing observables when updating existing Alert #2134

Closed
jeromeleonard opened this issue Jul 21, 2021 · 0 comments
Closed

[Bug] MISP sync delete existing observables when updating existing Alert #2134

jeromeleonard opened this issue Jul 21, 2021 · 0 comments
Assignees
@To-om
Labels
bug priority:high High Priority scope:misp TheHive4 TheHive4 related issues
Milestone
4.1.9

Comments

@jeromeleonard
Copy link
Contributor

Request Type

Bug

Problem Description

Steps to Reproduce

  1. Create an Event E1 in MISP with 1 attribute (O1)
  2. Sync with TheHive (1 Alert E1 with 1 obs. O1)
  3. Add 1 attribute (O2) in Event E1
  4. Sync with TheHive
  5. Alert E1 has been updated: O1 has been deleted and O2 has been added

2021-07-20_15-51-34
2021-07-20_15-51-25
2021-07-20_15-53-41
2021-07-20_15-54-47
2021-07-20_15-55-20
@jeromeleonard jeromeleonard added bug priority:high High Priority TheHive4 TheHive4 related issues scope:misp labels Jul 21, 2021
@To-om To-om added this to the 4.1.9 milestone Jul 23, 2021
To-om added a commit that referenced this issue Jul 23, 2021
@To-om
#2134 Remove old observables based on MISP soft-delete query
a451edc
@To-om To-om closed this as completed Jul 23, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@To-om To-om

Labels
bug priority:high High Priority scope:misp TheHive4 TheHive4 related issues
Projects
None yet
Milestone
4.1.9
Development

No branches or pull requests
2 participants
@jeromeleonard @To-om