Skip to content
This repository has been archived by the owner on Feb 2, 2024. It is now read-only.

Add MISP Decaying of Indicators Attributes To Feeds #23

Open
davecabio opened this issue Nov 25, 2020 · 0 comments
Open

Add MISP Decaying of Indicators Attributes To Feeds #23

davecabio opened this issue Nov 25, 2020 · 0 comments

Comments

@davecabio
Copy link

Is your feature request related to a problem?

Good morning,
MISP developers has added in September 2019 (from MISP 2.4.116) the Decaying of IOC model that adds some attributes about how the IOC should decay. Throught rest API is it possible to get this attributes in the json, but currently minemeld miner doesn't do that.
https://www.misp-project.org/2019/09/12/Decaying-Of-Indicators.html#

Is it possible to add it?

It should be enough to add this parameters in the REST request:

  • includeDecayScore [bool]: Attach the real-time computed score of the Attribute along with the associated Model information
  • excludeDecayed [bool]: Filter out all expired IOCs
  • decayingModel [list]: List of Model(s) that will be attached to the given Attributes
  • modelOverrides [dict]: JSON that can be used to modify Model parameters on-the-fly

Thanks in advance

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant