MImisp
Events

Enrich an event with the given modules

Changed on
post/events/enrichEvent/{eventId}

Request

  • Base URL
    https://misp.local
  • URL
    https://misp.local/events/enrichEvent/{eventId}
  • Auth
    API key in header Authorization

Path parameters

string required
OR
string uuid required
Example:12345

UUID or numeric ID of the event

Request body

reversednsboolean
sigma_syntax_validatorboolean
ods_enrichboolean
recordedfutureboolean
eupiboolean
docx_enrichboolean
passivetotalboolean
abuseipdbboolean
ransomcoindbboolean
domaintoolsboolean
crowdstrike_falconboolean
google_safe_browsingboolean
geoip_countryboolean
joesandbox_queryboolean
crowdsecboolean
geoip_asnboolean
rblboolean
yetiboolean
ocr_enrichboolean
onypheboolean
odt_enrichboolean
socialscanboolean
sophoslabs_intelixboolean
mmdb_lookupboolean
vmray_submitboolean
trustar_enrichboolean
ipinfoboolean
backscatter_ioboolean
ipasnboolean
urlscanboolean
threatcrowdboolean
html_to_markdownboolean
yara_queryboolean
sigma_queriesboolean
xforceexchangeboolean
whoisboolean
pdf_enrichboolean
threatfoxboolean
clamavboolean
vmware_nsxboolean
sigmf-expandboolean
urlhausboolean
stix2_pattern_syntax_validatorboolean
censys_enrichboolean
variotdbsboolean
joesandbox_submitboolean
virustotal_publicboolean
macaddress_ioboolean
mcafee_insights_enrichboolean
countrycodeboolean
shodanboolean
dnsdb_queryboolean
greynoiseboolean
xlsx_enrichboolean
lastline_submitboolean
assemblyline_submitboolean
hashlookupboolean
apivoidboolean
lastline_queryboolean
eqlboolean
cuckoo_submitboolean
hyasinsightboolean
assemblyline_queryboolean
circl_passivednsboolean
securitytrailsboolean
hashddboolean
geoip_cityboolean
qrcodeboolean
sourcecacheboolean
threatminerboolean
cytomic_orionboolean
iprepboolean
qintel_qsentryboolean
wikiboolean
cveboolean
btc_scam_checkboolean
whoisfreaksboolean
google_searchboolean
malwarebazaarboolean
intel471boolean
btc_steroidsboolean
mwdbboolean
dbl_spamhausboolean
onyphe_fullboolean
ipqs_fraud_and_risk_scoringboolean
farsight_passivednsboolean
cve_advancedboolean
cpeboolean
passive-sshboolean
vulnersboolean
yara_syntax_validatorboolean
jinja_template_renderingboolean
virustotalboolean
macvendorsboolean
vulndbboolean
circl_passivesslboolean
dnsboolean
otxboolean
bgprankingboolean
extract_url_componentsboolean
intelmq_eventdb.experimentalboolean
apiosintdsboolean
pptx_enrichboolean
hibpboolean

Response

Enrich event response

savedboolean

Present and true if the event was successfully enriched.

successboolean

Status message of the operation.

namestring
messagestring
urlstring
datastring
idstring

Example response

{
  "name": "enrichEvent",
  "message": "enrichEvent",
  "url": "/events/enrichEvent/1",
  "data": "#1 attributes have been created during the enrichment process.",
  "id": "1"
}

Changes