Raphaël Vinot

I'm fine either way with this change, but that means editing a few object names with uppercase in their name (it is not a problem, as the related objects aren't...

This is the mainstream template: https://github.com/MISP/misp-objects/blob/main/objects/trustar_report/definition.json It doesn't have a `THREAT_ACTOR`. Is it possible that someone updated the template in your MISP instance and didn't share it with us? Either...

Okay, I add it in the feature requests queue. It will be implemented as soon as possible, depending on the urgent/paid features requests we receive.

You seem to have put the template on the server, and you're using PyMISP in the script in your download directory. Am I correct? If yes, this won't work: PyMISP...

I edited your issue to display your code as a script because that was wholly unintelligible. I have no idea what wazuh is, so I'm not sure I can help...

No, there is no way to do that, The Event ID is auto incremented ad the DB level. I'd recommend you to use UUIDs instead.

I'm totally open to that, but I'll need some help so github doesn't report the project as failing for the next 6 months while we implement all the changes. Also,...

Having the lint in a separate workflow makes total sense, but I also don't want to just have it broken for weeks because then I start ignoring the mails that...

I'm gonna be annoying regarding the line length: is there a way to make black ignore it all together? Having a max length to 160 is fine with me, but...

Sorry for the delay, I was busy on another project for the last few days. I'm wrapping up on that today and will make sure to review and merge your...