MISP — API

What it covers

• Servers 23 Servers represent MISP instances we are connected to and from which we can pull/push data from/to.
• Attributes 13 Attributes in MISP can be network indicators (e.g. IP address), system indicators (e.g. a string in memory) or even bank account details.
• Events 12 MISP events are encapsulations for contextually related information represented as attributes and objects.
• Feeds 9 Feeds are remote or local resources containing indicators that can be automatically imported into MISP at regular intervals.
• Galaxy Clusters 9 A galaxy cluster that can be attached to MISP events or attributes.
• Sharing Groups 9 Sharing groups in MISP are a more granular way to create re-usable distribution lists for events/attributes that allow users to include organisations from their own instance (local organisations) as well as…
• Event Report 8 Event reports can contain text under the markdown format and are stored inside an event.
• Galaxies 8 Galaxies in MISP are a method used to express a large object called cluster that can be attached to MISP events or attributes.
• Sharing Group Blueprints 8 Sharing group blueprints allow a user to programmatically define reusable blueprints for generating sharing groups, based on inheritance and various filters.
• Taxonomies 7 MISP Taxonomies is a set of common classification libraries to tag, classify and organise information.
• Users 7 As an admin (not to be confused with Org Admin), you can set up new accounts for users, edit user profiles, delete them, or just have a look at all the viewers' profiles.
• Analyst Data 6 Analyst Data allows analysts to share and add their own analysis to any MISP data having an UUID.