cheat-sheet-2.md

Cheat sheet #2

Create a MISP object

MISP object location:

/var/www/MISP/app/files/misp-objects/objects

File to change: definition.json

Header:

• UUID
• description and name
• version
• meta-category
• required
• requireOneOf

Objcet template attributes

• description
• misp-attribute
• ui-priority
• disable_correlation
• multiple
• values_list

Update MISP

Global actions > List Object Templates > Update Objects

Relationships

/var/www/MISP/app/files/misp-objects/relationships/definition.json

Validation

./jq_all_the_things.sh
./validate_all.sh

source: misp-project