misp-book
misp-book copied to clipboard
Automation: How to update Event (edit)
The Automation document does not describe how to update (EDIT) an event through the API
Should be added (from what I found in the PHP code): POST https://localhost/events/EVENTID The request body must include the timestamp which should be greater than the Event timestamp in DB. And all the Event data to update. UUID remains unchanged. 'analysis', 'threat_level_id', 'info', 'distribution', 'date' remain unchanged if not set in the request body, as well as objects and/or attributes.