Galaxies

Import a galaxy cluster

Changed on Dec 11, 2025

post/galaxies/import

Request

Base URL
https://misp.local
URL
https://misp.local/galaxies/import
Auth
API key in header Authorization

Request body

Example request

[
  {
    "GalaxyCluster": {
      "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
      "collection_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
      "type": "mitre-enterprise-attack-attack-pattern",
      "value": "Brute Force - T1110",
      "tag_name": "tlp:white",
      "description": "Adversaries may use brute force techniques to attempt access to accounts when passwords are unknown or when password hashes are obtained...",
      "galaxy_id": "12345",
      "source": "https://github.com/mitre/cti",
      "authors": [
        "MITRE"
      ],
      "version": "1",
      "distribution": "4",
      "sharing_group_id": "1",
      "org_id": "12345",
      "orgc_id": "12345",
      "extends_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
      "extends_version": "1",
      "GalaxyElement": [
        {
          "id": "12345",
          "galaxy_cluster_id": "12345",
          "key": "categories",
          "value": "Military"
        }
      ],
      "Galaxy": {
        "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b"
      }
    }
  }
]

Response

Import galaxy cluster response

savedboolean nullable

Present and true if the galaxy was successfully imported.

successboolean nullable

Present and true if the galaxy was successfully imported.

namestring

messagestring

urlstring

Example response

{
  "name": "'Galaxy clusters imported. 1 imported, 0 ignored, 0 failed.",
  "message": "'Galaxy clusters imported. 1 imported, 0 ignored, 0 failed.",
  "url": "/galaxies/import"
}

Changes

Dec 11, 20250a9c9382121a Revision changes
- breaking
  the request property ////// became not nullable
- breaking
  the ////// request property type changed from string to no type
- info
  added to the ////// request property oneOf list
- info
  removed the pattern ^\d+$|^$ from the request property //////
Dec 1, 20259a8377167f3c Revision changes
- breaking
  added subschema #2 to the / request property allOf list
- breaking
  the / request property type changed from object to no type
- warning
  removed the request property /
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //
- warning
  removed the request property //

Operation history