(wish-list): MISP to intelmq exporter

[aaronkaplan]

(currently in the MISP API workshop)

It would be great to use MISP as an input source. And for MISP there are exporters which can send data somewhere. So, for this it could emit IDF JSON essentially based on a a MISP RestSearch/ API call.

This could allow us to filter (with the MISP RestSearch/ API call) for specific things and export only those as a feed to IntelMQ.

Build on top of the pihole script example from @iglocska from the workshop. Yay!

[sebix]

There is already a MISP collector: https://docs.intelmq.org/latest/user/bots/#misp-generic

[aaronkaplan]

I know . But I was more talking about using the "misp exporter" to pre-convert to IDF and then this becomes way simpler.