Add Object

Add an object to an event.

To learn more, visit the MISP documentation.

Parameters​

Parameter	Description
Attribute	Attributes of the object.Example:[ { "category": "Internal reference", "value": "127.0.0.1", "to_ids": true, "disable_correlation": false, "distribution": "0", "comment": "logged source ip", "object_relation": "sensor" }]
Event ID	UUID or numeric ID of the event. Can be obtained by using the List Events action.
Object Template ID	UUID Or numeric ID of the object template.

Example Output​

{    "Object": {        "id": "12345",        "name": "ail-leak",        "meta-category": "string",        "description": "string",        "template_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",        "template_version": "1",        "event_id": "12345",        "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",        "timestamp": "1617875568",        "distribution": "0",        "sharing_group_id": "1",        "comment": "string",        "deleted": true,        "first_seen": "1581984000000000",        "last_seen": "1581984000000000",        "Attribute": [            {                "id": "12345",                "event_id": "12345",                "object_id": "12345",                "object_relation": "sensor",                "category": "Internal reference",                "type": "md5",                "value": "127.0.0.1",                "to_ids": true,                "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",                "timestamp": "1617875568",                "distribution": "0",                "sharing_group_id": "1",                "comment": "logged source ip",                "deleted": false,                "disable_correlation": false,                "first_seen": "1581984000000000",                "last_seen": "1581984000000000"            }        ]    }}

Workflow Library Example​

Add Object with Misp and Send Results Via Email

Preview this Workflow on desktop