Cheat sheet #2


Cheat sheet #2

Create a MISP object

MISP object location:

/var/www/MISP/app/files/misp-objects/objects

File to change: definition.json

  • UUID
  • description and name
  • version
  • meta-category
  • required
  • requireOneOf

Objcet template attributes

  • description
  • misp-attribute
  • ui-priority
  • disable_correlation
  • multiple
  • values_list

Update MISP

Global actions > List Object Templates > Update Objects

Relationships

/var/www/MISP/app/files/misp-objects/relationships/definition.json

Validation

./jq_all_the_things.sh
./validate_all.sh

source: misp-project