Galaxy Clusters
Get galaxy cluster by ID
Changed onget/galaxy_clusters/view/{galaxyClusterId}
Request
- Base URLhttps://misp.local
- URLhttps://misp.local/galaxy_clusters/view/{galaxyClusterId}
- AuthAPI key in header Authorization
Path parameters
Example:12345
UUID or numeric ID of the galaxy cluster
Response
Extended galaxy cluster by ID response
Example response
{
"GalaxyCluster": {
"id": "12345",
"uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"collection_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"type": "mitre-enterprise-attack-attack-pattern",
"value": "Brute Force - T1110",
"tag_name": "tlp:white",
"description": "Adversaries may use brute force techniques to attempt access to accounts when passwords are unknown or when password hashes are obtained...",
"galaxy_id": "12345",
"source": "https://github.com/mitre/cti",
"authors": [
"MITRE"
],
"version": "1",
"distribution": "4",
"sharing_group_id": "1",
"org_id": "12345",
"orgc_id": "12345",
"extends_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"extends_version": "1",
"GalaxyElement": [
{
"id": "12345",
"galaxy_cluster_id": "12345",
"key": "categories",
"value": "Military"
}
],
"Galaxy": {
"id": "12345",
"uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"name": "Ransomware",
"type": "ransomware",
"description": "Ransomware galaxy based on ...",
"version": "1",
"icon": "globe",
"namespace": "misp",
"kill_chain_order": {
"fraud-tactics": [
"Initiation",
"Target Compromise",
"Perform Fraud",
"Obtain Fraudulent Assets",
"Assets Transfer",
"Monetisation"
]
}
},
"GalaxyClusterRelation": [
{
"id": "12345",
"galaxy_cluster_id": "12345",
"key": "categories",
"value": "Military"
}
],
"Org": {
"id": "12345",
"name": "ORGNAME",
"date_created": "2021-06-14 14:29:19",
"date_modified": "2021-06-14 14:29:19",
"type": "ADMIN",
"created_by": "12345",
"user_count": "3"
},
"Orgc": {
"id": "12345",
"name": "ORGNAME",
"date_created": "2021-06-14 14:29:19",
"date_modified": "2021-06-14 14:29:19",
"type": "ADMIN",
"created_by": "12345",
"user_count": "3"
},
"tag_id": "12345"
}
}Changes
- breaking
the
/////////response property's maxLength was unset from10for the response status - breaking
added to the
/////////response propertyoneOflist for the response status - breaking
the
/////////response's property type changed fromstringto no type for status - info
the
/////////response's property pattern^\d+$|^$was removed for the status
- breaking
- breaking
the
/////////response property's maxLength was unset from36for the response status - breaking
the
/////////response property's maxLength was unset from36for the response status - breaking
the
///response property's maxLength was unset from36for the response status
- breaking