misp-modules icon indicating copy to clipboard operation
misp-modules copied to clipboard

MISP Modules : /events /enrichEvent/1'

Open Jay12390 opened this issue 2 years ago • 5 comments

Every time after creating a Event and by adding attributes like domain , url, ip address, mac address in it .However while typing to enrich the event by clicking the "Enrich Event" option . It isn't showing any type of options like DNS, Reverse DNS ,etc. Even after that by clicking the "enrich" option , it's displaying

MODULES NOT SET You don't have permission to access '/events/enrichEvent/1'

Jay12390 avatar Sep 22 '22 10:09 Jay12390

I am facing the same issue, was it resolved?

MU-03 avatar Dec 27 '22 06:12 MU-03

I seem to have the same issue too.

ArifeVural avatar Jan 05 '23 15:01 ArifeVural

Same with everyone here, I just got my Cortex server running and when I click the enrich button on MISP, same errors as above. Although running cortex analyzers manually and via TheHive works for me

carlokohan avatar Jan 10 '23 02:01 carlokohan

@adulau Please Guide us all. Thank you.

MU-03 avatar Jan 10 '23 07:01 MU-03

I have the solution:

In my case I did not run the following commands:

First run these: sudo cp etc/systemd/system/misp-modules.service /etc/systemd/system/ sudo systemctl daemon-reload sudo systemctl enable --now misp-modules sudo service misp-modules start and than go to folder /var/www/MISP/venv/bin/ in terminal and run the following command: /var/www/MISP/venv/bin/misp-modules -l 127.0.0.1 &

Hope it helps. Regards

MU-03 avatar Jan 10 '23 07:01 MU-03