MImisp
Galaxies

Export galaxy clusters

Changed on
post/galaxies/export/{galaxyId}

Request

  • Base URL
    https://misp.local
  • URL
    https://misp.local/galaxies/export/{galaxyId}
  • Auth
    API key in header Authorization

Path parameters

string required
OR
string uuid required
Example:12345

UUID or numeric ID of the galaxy

Request body

Example request

{
  "Galaxy": {
    "distribution": "4"
  }
}

Response

Export galaxy clusters response

OR

Example response

[
  {
    "id": "12345",
    "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
    "collection_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
    "type": "mitre-enterprise-attack-attack-pattern",
    "value": "Brute Force - T1110",
    "tag_name": "tlp:white",
    "description": "Adversaries may use brute force techniques to attempt access to accounts when passwords are unknown or when password hashes are obtained...",
    "galaxy_id": "12345",
    "source": "https://github.com/mitre/cti",
    "authors": [
      "MITRE"
    ],
    "version": "1",
    "distribution": "4",
    "sharing_group_id": "1",
    "org_id": "12345",
    "orgc_id": "12345",
    "extends_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
    "extends_version": "1",
    "GalaxyElement": [
      {
        "id": "12345",
        "galaxy_cluster_id": "12345",
        "key": "categories",
        "value": "Military"
      }
    ]
  }
]

Changes

  • 52c54048079cRevision changes
    • breaking

      removed the enum value 0 of the request property /

    • breaking

      removed the enum value 1 of the request property /

    • breaking

      removed the enum value 2 of the request property /

    • breaking

      removed the enum value 3 of the request property /

    • breaking

      removed the enum value 4 of the request property /

    • breaking

      removed the enum value 5 of the request property /

    • breaking

      the / request property type changed from string to no type

    • info

      added subschema #2 to the / request property oneOf list

  • 0a9c9382121aRevision changes
    • breaking

      the ////// response property's maxLength was unset from 10 for the response status

    • breaking

      added to the ////// response property oneOf list for the response status

    • breaking

      the ////// response's property type changed from string to no type for status

    • info

      the ////// response's property pattern ^\d+$|^$ was removed for the status