(currently in the MISP API workshop)
It would be great to use MISP as an input source. And for MISP there are exporters which can send data somewhere.
So, for this it could emit IDF JSON essentially based on a a MISP RestSearch/ API call.
This could allow us to filter (with the MISP RestSearch/ API call) for specific things and export only those as a feed to IntelMQ.
Build on top of the pihole script example from @iglocska from the workshop. Yay!
(currently in the MISP API workshop)
It would be great to use MISP as an input source. And for MISP there are exporters which can send data somewhere.
So, for this it could emit IDF JSON essentially based on a a MISP RestSearch/ API call.
This could allow us to filter (with the MISP RestSearch/ API call) for specific things and export only those as a feed to IntelMQ.
Build on top of the pihole script example from @iglocska from the workshop. Yay!