Skip to content

Export to MISP: add TLP #314

Closed
Closed
@garanews

Description

@garanews

Request Type

Add TLP support when exporting cases to MISP

Problem Description

When exporting cases to MISP the TLPs set in The Hive (over the case and the attributes) are not replicated in MISP.
MISP supports the TLP through the Taxonomy Library: tlp
That contains the unique values:
image

Steps to Reproduce

Send a case to MISP

Possible Solutions

Through the function get_tags(misp) from pymisp is possible to retrieve the tag id needed for set the tlp in MISP
image

It should be possible obtain the id also through the REST API accessing to
/tags/index.json
image

so to /tags/index
post {"filter":"tlp:red"}
will get back the tlp:red matching tags ( thanks @iglocska )

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions