Sign in
Events

Edit event

put/events/edit/{eventId}

Path parameters

string required
OR
string uuid required
Example:12345

UUID or numeric ID of the event

Request body

org_idstring
distribution'0' | '1' | '2' | '3' | '4' | '5'

Who will be able to see this event once it becomes published and eventually when it becomes pulled:

  • 0 - Your organization only
  • 1 - This community only
  • 2 - Connected communities
  • 3 - All communities
  • 4 - Sharing group
  • 5 - Inherit Event
infostring
orgc_idstring
uuidstring uuid
datestring
publishedboolean
analysis'0' | '1' | '2'

Represents the analysis maturity level.

  • 0 - Initial
  • 1 - Ongoing
  • 2 - Complete
attribute_countstring
timestampstring nullable
sharing_group_idstring nullable
proposal_email_lockboolean
lockedboolean
threat_level_id'1' | '2' | '3' | '4'

Represents the threat level.

  • 1 - High
  • 2 - Medium
  • 3 - Low
  • 4 - Undefined
publish_timestampstring
sighting_timestampstring
disable_correlationboolean
extends_uuidstring nullable
event_creator_emailstring email

Example request

{
  "org_id": "12345",
  "info": "logged source ip",
  "orgc_id": "12345",
  "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
  "date": "1991-01-15",
  "attribute_count": "321",
  "timestamp": "1617875568",
  "sharing_group_id": "1",
  "publish_timestamp": "1617875568",
  "sighting_timestamp": "1617875568",
  "extends_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b"
}

Response

A freshly updated event

Example response

{
  "Event": {
    "id": "12345",
    "org_id": "12345",
    "info": "logged source ip",
    "orgc_id": "12345",
    "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
    "date": "1991-01-15",
    "attribute_count": "321",
    "timestamp": "1617875568",
    "sharing_group_id": "1",
    "publish_timestamp": "1617875568",
    "sighting_timestamp": "1617875568",
    "extends_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
    "Feed": {
      "id": "3",
      "name": "CIRCL OSINT Feed",
      "provider": "CIRCL",
      "url": "https://www.circl.lu/doc/misp/feed-osint",
      "rules": "{\"tags\":{\"OR\":[],\"NOT\":[]},\"orgs\":{\"OR\":[],\"NOT\":[]},\"url_params\":\"\"}",
      "sharing_group_id": "1",
      "tag_id": "12345",
      "event_id": "12345",
      "settings": "{\"csv\":{\"value\":\"\",\"delimiter\":\"\"},\"common\":{\"excluderegex\":\"\"},\"disable_correlation\":\"1\"}",
      "headers": "X-Custom-Header-A: Foo\nX-Custom-Header-B: Bar\n",
      "orgc_id": "12345",
      "cache_timestamp": "1617875568"
    },
    "Org": {
      "id": "12345",
      "name": "ORGNAME",
      "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b"
    },
    "Orgc": {
      "id": "12345",
      "name": "ORGNAME",
      "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b"
    },
    "Attribute": [
      {
        "id": "12345",
        "event_id": "12345",
        "object_id": "12345",
        "object_relation": "sensor",
        "value": "127.0.0.1",
        "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
        "timestamp": "1617875568",
        "sharing_group_id": "1",
        "comment": "logged source ip",
        "first_seen": "1581984000000000",
        "last_seen": "1581984000000000"
      }
    ],
    "ShadowAttribute": [
      {
        "id": "12345",
        "event_id": "12345",
        "object_id": "12345",
        "object_relation": "sensor",
        "value": "127.0.0.1",
        "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
        "timestamp": "1617875568",
        "sharing_group_id": "1",
        "comment": "logged source ip",
        "first_seen": "1581984000000000",
        "last_seen": "1581984000000000"
      }
    ],
    "RelatedEvent": [
      {
        "Event": {
          "id": "12345",
          "org_id": "12345",
          "info": "logged source ip",
          "orgc_id": "12345",
          "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
          "date": "1991-01-15",
          "attribute_count": "321",
          "timestamp": "1617875568",
          "sharing_group_id": "1",
          "publish_timestamp": "1617875568",
          "sighting_timestamp": "1617875568",
          "extends_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
          "Feed": {
            "id": "3",
            "name": "CIRCL OSINT Feed",
            "provider": "CIRCL",
            "url": "https://www.circl.lu/doc/misp/feed-osint",
            "rules": "{\"tags\":{\"OR\":[],\"NOT\":[]},\"orgs\":{\"OR\":[],\"NOT\":[]},\"url_params\":\"\"}",
            "sharing_group_id": "1",
            "tag_id": "12345",
            "event_id": "12345",
            "settings": "{\"csv\":{\"value\":\"\",\"delimiter\":\"\"},\"common\":{\"excluderegex\":\"\"},\"disable_correlation\":\"1\"}",
            "headers": "X-Custom-Header-A: Foo\nX-Custom-Header-B: Bar\n",
            "orgc_id": "12345",
            "cache_timestamp": "1617875568"
          },
          "Org": {
            "id": "12345",
            "name": "ORGNAME",
            "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b"
          },
          "Orgc": {
            "id": "12345",
            "name": "ORGNAME",
            "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b"
          },
          "Attribute": [
            {
              "id": "12345",
              "event_id": "12345",
              "object_id": "12345",
              "object_relation": "sensor",
              "value": "127.0.0.1",
              "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
              "timestamp": "1617875568",
              "sharing_group_id": "1",
              "comment": "logged source ip",
              "first_seen": "1581984000000000",
              "last_seen": "1581984000000000"
            }
          ],
          "ShadowAttribute": [
            {
              "id": "12345",
              "event_id": "12345",
              "object_id": "12345",
              "object_relation": "sensor",
              "value": "127.0.0.1",
              "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
              "timestamp": "1617875568",
              "sharing_group_id": "1",
              "comment": "logged source ip",
              "first_seen": "1581984000000000",
              "last_seen": "1581984000000000"
            }
          ],
          "Galaxy": [
            {
              "id": "12345",
              "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
              "name": "Ransomware",
              "type": "ransomware",
              "description": "Ransomware galaxy based on ...",
              "version": "1",
              "icon": "globe",
              "namespace": "misp",
              "kill_chain_order": {
                "fraud-tactics": [
                  "Initiation",
                  "Target Compromise",
                  "Perform Fraud",
                  "Obtain Fraudulent Assets",
                  "Assets Transfer",
                  "Monetisation"
                ]
              }
            }
          ],
          "Object": [
            {
              "id": "12345",
              "name": "ail-leak",
              "template_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
              "template_version": "1",
              "event_id": "12345",
              "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
              "timestamp": "1617875568",
              "sharing_group_id": "1",
              "first_seen": "1581984000000000",
              "last_seen": "1581984000000000",
              "Attribute": [
                {
                  "id": "12345",
                  "event_id": "12345",
                  "object_id": "12345",
                  "object_relation": "sensor",
                  "value": "127.0.0.1",
                  "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
                  "timestamp": "1617875568",
                  "sharing_group_id": "1",
                  "comment": "logged source ip",
                  "first_seen": "1581984000000000",
                  "last_seen": "1581984000000000"
                }
              ]
            }
          ],
          "EventReport": [
            {
              "id": "12345",
              "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
              "event_id": "12345",
              "name": "Report of the incident",
              "sharing_group_id": "1",
              "timestamp": "1617875568"
            }
          ],
          "Tag": [
            {
              "id": "12345",
              "name": "tlp:white",
              "colour": "#ffffff",
              "org_id": "12345",
              "user_id": "12345",
              "numerical_value": "12345"
            }
          ]
        }
      }
    ],
    "Galaxy": [
      {
        "id": "12345",
        "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
        "name": "Ransomware",
        "type": "ransomware",
        "description": "Ransomware galaxy based on ...",
        "version": "1",
        "icon": "globe",
        "namespace": "misp",
        "kill_chain_order": {
          "fraud-tactics": [
            "Initiation",
            "Target Compromise",
            "Perform Fraud",
            "Obtain Fraudulent Assets",
            "Assets Transfer",
            "Monetisation"
          ]
        }
      }
    ],
    "Object": [
      {
        "id": "12345",
        "name": "ail-leak",
        "template_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
        "template_version": "1",
        "event_id": "12345",
        "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
        "timestamp": "1617875568",
        "sharing_group_id": "1",
        "first_seen": "1581984000000000",
        "last_seen": "1581984000000000",
        "Attribute": [
          {
            "id": "12345",
            "event_id": "12345",
            "object_id": "12345",
            "object_relation": "sensor",
            "value": "127.0.0.1",
            "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
            "timestamp": "1617875568",
            "sharing_group_id": "1",
            "comment": "logged source ip",
            "first_seen": "1581984000000000",
            "last_seen": "1581984000000000"
          }
        ]
      }
    ],
    "EventReport": [
      {
        "id": "12345",
        "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
        "event_id": "12345",
        "name": "Report of the incident",
        "sharing_group_id": "1",
        "timestamp": "1617875568"
      }
    ],
    "Tag": [
      {
        "id": "12345",
        "name": "tlp:white",
        "colour": "#ffffff",
        "org_id": "12345",
        "user_id": "12345",
        "numerical_value": "12345"
      }
    ]
  }
}

Changes