misp-modules icon indicating copy to clipboard operation
misp-modules copied to clipboard

csvimport support

Open amrroq opened this issue 1 year ago • 2 comments

I've been trying to piece together details from various resources on how to use the csvimport module but I'm hoping someone with more experience can help me out. I'm unsure how to query it using the API--I've enabled the module and everything and get a list of modules returned from http://127.0.0.1:6666/modules, so the module should be working. Specifically, I'm unsure of the syntax that the module is expecting to receive....do I just format it the way the userConfig object is formatted in csvimport.py? Or do I edit csvimport.py directly and put the header values in there? Also, from what I've read it sounds like I should be able to see/use this module in the Web UI....? But when I go to Events Actions > Add Event > Import from... there is no option for csv.

Screen Shot 2023-05-15 at 12 50 35 PM

Ubuntu 20.04.6 LTS

MISP 2.4.168

PyMISP 2.4.157

Python 3.8.10

I also just updated misp-modules per these instructions: https://github.com/MISP/misp-book/tree/main/updating-python#updating-misp-modules

TIA

amrroq avatar May 15 '23 20:05 amrroq

Import module are available for an event. You need first to create an event and then go to the import. There you'll find all the import modules available in MISP.

adulau avatar May 16 '23 04:05 adulau

Ahhhh, I see it now. Thank you!

Do you also have any guidance or a link you could point me to for how to properly format an API call to the csvimport module?

amrroq avatar May 17 '23 16:05 amrroq