misp-modules
misp-modules copied to clipboard
Modules for expansion services, enrichment, import and export in MISP and other tools.
The css style is now loading while installing the website. ## Steps to reproduce ``` clone repo and cd into it poetry install --unstable poetry run misp-modules mv website/config.cfg.example website/config.cfg...
Hey there, Running latest version of the misp-modules and have updated all :) Here is a sample MISP event to replicate [misp.event.1788.json](https://github.com/user-attachments/files/18170419/misp.event.1788.json) First I mark all the IP's:  Then...
Looks to me like https://cvepremium.circl.lu/api/cve/CVE-2024-13211 returns 404, for not found CVEs. This is not properly handled by the cve_advanced module: https://github.com/MISP/misp-modules/blob/3033525c937c3b0ddc90477cd25f8d31e6d5e90f/misp_modules/modules/expansion/cve_advanced.py#L171
Is it possible to enable and disable SSL verification at the following line of code https://github.com/MISP/misp-modules/blob/7e2297aa71c792c99ee88205beb6c03d8adb2ac4/misp_modules/modules/import_mod/taxii21.py#L264
Do we have any documentation on how to configure taxii21 misp-module? What I have tried? - I have 2.4.198, for misp and misp-modules running and connected, confirmed in the diagnostics....
Updated module version and improved documentation for Rapid7 AttackerKB lookup.
I'm trying to make some updates to the [greynoise.py enrichment module](https://github.com/MISP/misp-modules/blob/main/misp_modules/modules/expansion/greynoise.py), and one of the things I've noticed is that, upon enrichment, it creates a greynoise-ip version 1 object in...