PyMISP

PyMISP copied to clipboard

VTReportObject Raising Error if Hash not Previously Seen

3

Hi, When querying for a VirusTotal Report with the line: > VTReportObject(apikey=vt_apikey, indicator=file_md5) I have noticed that the if the indicator input (file_md5) has no matches found on VirusTotal, then...

kevin3567

new: test for orgc update

1

Related * https://github.com/MISP/PyMISP/issues/744 * https://github.com/MISP/MISP/issues/7460

Rafiot

Cannot update event org

7

Hello I try to update an event's org (not orgc): ``` event = misp.get_event(519, pythonify=False) event['Event']['Org']['uuid']='5dfb7cb3-19c0-421e-a120-768ebca539c9' event['Event']['Org']['name']="REDACTED" event['Event']['Org']['id'] = '11' event['Event']['org_id'] = '11' misp.update_event(event, 519) ``` But all I get...

csirt-pj

How to ignore case for keyword matching when using misp.search()

6

For example, I have the following 2 events： 1. event1 info : APT actor Lazarus was focused on geopolitical agenda 2. event2 info : North Korea-linked lazarus APT group has...

A1oha

Extend events() method to accept page and limit parameters

1

Extend the PyMISP events() function to accept and send limit & page path parameters to match the behavior of the MISP web UI, which accepts URLs like this and adjusts...

chrisinmtown

Document attr behavior: type and value are required but category is set by default

6

The PyMISP API should document somewhere that an attribute must have a type and a value, but if no category is supplied, a default value is set based on the...

chrisinmtown

Creating a MISPGalaxyCluster

14

@tomking2 would you happen to have an example on how to create and add a galaxy cluster? I started out with something like this.. but it didn't turn out right....

imidoriya

PyMISP get object template from server and drop local copies from package

11

Inspired by #658 this requests a new feature: the PyMISP client MISPObject class `__init__()` method should query the MISP server for the object template definition (e.g., "my-internal-bad-event") instead of requiring...

chrisinmtown

Connection aborted. RemoteDisconnected('Remote end closed connection without response')

3

### Work environment | Questions | Answers |---------------------------|-------------------- | Type of issue | Bug | OS version (server) | Ubuntu I believe | OS version (client) | MacOS | PHP...

LFED-FP

Add new feature to delete list of attributes by ID

6

Request a PyMISP method that accepts a list of attributes to be deleted. In version 2.4.133 api.py exposes method `delete_attribute(id)` which works fine. If run on the MISP server host...

chrisinmtown