Skip to content

Export Case to MISP#

Export Case to a MISP server to create an event including the Case observables marked as IOC.

Query#

POST /api/connector/misp/export/{id}/{misp-server}

With:

  • id: id of the Case
  • misp-server: name of the MISP server as defined in the configuration

Note

Only MISP servers with purpose equals to ExportOnly or ImportAndExport can recieve Case exports

Response#

Status codes#

  • 204: if Case is successfully exported
  • 401: Authentication error
  • 404: if Case or MISP server is not found.
Last update: September 20, 2021 07:42:31