MImisp
Collections

Add a collection

Changed on
post/collections/add

Request

  • Base URL
    https://misp.local
  • URL
    https://misp.local/collections/add
  • Auth
    API key in header Authorization

Request body

uuidstring uuid
type'campaign' | 'intrusion_set' | 'named_threat' | 'other' | 'research'
namestring
descriptionstring
distribution'0' | '1' | '2' | '3' | '4' | '5'

Who will be able to see this event once it becomes published and eventually when it becomes pulled:

  • 0 - Your organization only
  • 1 - This community only
  • 2 - Connected communities
  • 3 - All communities
  • 4 - Sharing group
  • 5 - Inherit Event

Example request

{
  "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
  "name": "APT Campaign Collection",
  "description": "This is a dummy description, for a collection about Aiur.",
  "distribution": "4",
  "sharing_group_id": "1"
}

Response

A collection

Example response

{
  "Collection": {
    "id": "12345",
    "org_id": "12345",
    "orgc_id": "12345",
    "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
    "created": "2024-03-19 11:10:24",
    "modified": "2024-03-19 11:10:24",
    "user_id": "12345",
    "name": "APT Campaign Collection",
    "description": "This is a dummy description, for a collection about Aiur.",
    "distribution": "4",
    "sharing_group_id": "1"
  }
}

Changes

  • 0a9c9382121aRevision changes
    • breaking

      the request property //// became not nullable

    • breaking

      the //// request property type changed from string to no type

    • breaking

      the ///// response property's maxLength was unset from 10 for the response status

    • breaking

      added to the ///// response property oneOf list for the response status

    • breaking

      the ///// response's property type changed from string to no type for status

    • info

      added to the //// request property oneOf list

    • info

      removed the pattern ^\d+$|^$ from the request property ////

    • info

      the ///// response's property pattern ^\d+$|^$ was removed for the status

  • 392ce38a6c1fRevision changes
    • info

      endpoint added