Sign in

88b34ff032a1

latestOpenAPI 3.0.02026-07-17166300328.1 KB
Events

Get a list of events

get/events

Response

A list of events with extended properties

idstring
org_idstring
distribution'0' | '1' | '2' | '3' | '4' | '5'

Who will be able to see this event once it becomes published and eventually when it becomes pulled:

  • 0 - Your organization only
  • 1 - This community only
  • 2 - Connected communities
  • 3 - All communities
  • 4 - Sharing group
  • 5 - Inherit Event
infostring
orgc_idstring
uuidstring uuid
datestring
publishedboolean
analysis'0' | '1' | '2'

Represents the analysis maturity level.

  • 0 - Initial
  • 1 - Ongoing
  • 2 - Complete
attribute_countstring
timestampstring nullable
proposal_email_lockboolean
lockedboolean
threat_level_id'1' | '2' | '3' | '4'

Represents the threat level.

  • 1 - High
  • 2 - Medium
  • 3 - Low
  • 4 - Undefined
publish_timestampstring
sighting_timestampstring
disable_correlationboolean
extends_uuidstring nullable
event_creator_emailstring email

Example response

[
  {
    "id": "12345",
    "org_id": "12345",
    "distribution": "4",
    "info": "logged source ip",
    "orgc_id": "12345",
    "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
    "date": "1991-01-15",
    "attribute_count": "321",
    "timestamp": "1617875568",
    "sharing_group_id": "1",
    "publish_timestamp": "1617875568",
    "sighting_timestamp": "1617875568",
    "extends_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
    "Feed": {
      "id": "3",
      "name": "CIRCL OSINT Feed",
      "provider": "CIRCL",
      "url": "https://www.circl.lu/doc/misp/feed-osint",
      "rules": "{\"tags\":{\"OR\":[],\"NOT\":[]},\"orgs\":{\"OR\":[],\"NOT\":[]},\"url_params\":\"\"}",
      "distribution": "4",
      "sharing_group_id": "1",
      "tag_id": "12345",
      "event_id": "12345",
      "settings": "{\"csv\":{\"value\":\"\",\"delimiter\":\"\"},\"common\":{\"excluderegex\":\"\"},\"disable_correlation\":\"1\"}",
      "headers": "X-Custom-Header-A: Foo\nX-Custom-Header-B: Bar\n",
      "orgc_id": "12345",
      "cache_timestamp": "1617875568"
    },
    "Org": {
      "id": "12345",
      "name": "ORGNAME",
      "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b"
    },
    "Orgc": {
      "id": "12345",
      "name": "ORGNAME",
      "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b"
    },
    "Attribute": [
      {
        "id": "12345",
        "event_id": "12345",
        "object_id": "12345",
        "object_relation": "sensor",
        "value": "127.0.0.1",
        "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
        "timestamp": "1617875568",
        "distribution": "4",
        "sharing_group_id": "1",
        "comment": "logged source ip",
        "first_seen": "1581984000000000",
        "last_seen": "1581984000000000",
        "Tag": [
          {
            "id": "12345",
            "name": "tlp:white",
            "colour": "#ffffff",
            "org_id": "12345",
            "user_id": "12345",
            "numerical_value": "12345"
          }
        ],
        "Galaxy": [
          {
            "id": "12345",
            "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
            "name": "Ransomware",
            "type": "ransomware",
            "description": "Ransomware galaxy based on ...",
            "version": "1",
            "icon": "globe",
            "namespace": "misp",
            "kill_chain_order": {
              "fraud-tactics": [
                "Initiation",
                "Target Compromise",
                "Perform Fraud",
                "Obtain Fraudulent Assets",
                "Assets Transfer",
                "Monetisation"
              ]
            }
          }
        ]
      }
    ],
    "ShadowAttribute": [
      {
        "id": "12345",
        "event_id": "12345",
        "object_id": "12345",
        "object_relation": "sensor",
        "value": "127.0.0.1",
        "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
        "timestamp": "1617875568",
        "distribution": "4",
        "sharing_group_id": "1",
        "comment": "logged source ip",
        "first_seen": "1581984000000000",
        "last_seen": "1581984000000000",
        "Tag": [
          {
            "id": "12345",
            "name": "tlp:white",
            "colour": "#ffffff",
            "org_id": "12345",
            "user_id": "12345",
            "numerical_value": "12345"
          }
        ],
        "Galaxy": [
          {
            "id": "12345",
            "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
            "name": "Ransomware",
            "type": "ransomware",
            "description": "Ransomware galaxy based on ...",
            "version": "1",
            "icon": "globe",
            "namespace": "misp",
            "kill_chain_order": {
              "fraud-tactics": [
                "Initiation",
                "Target Compromise",
                "Perform Fraud",
                "Obtain Fraudulent Assets",
                "Assets Transfer",
                "Monetisation"
              ]
            }
          }
        ]
      }
    ],
    "Galaxy": [
      {
        "id": "12345",
        "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
        "name": "Ransomware",
        "type": "ransomware",
        "description": "Ransomware galaxy based on ...",
        "version": "1",
        "icon": "globe",
        "namespace": "misp",
        "kill_chain_order": {
          "fraud-tactics": [
            "Initiation",
            "Target Compromise",
            "Perform Fraud",
            "Obtain Fraudulent Assets",
            "Assets Transfer",
            "Monetisation"
          ]
        }
      }
    ],
    "Object": [
      {
        "id": "12345",
        "name": "ail-leak",
        "template_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
        "template_version": "1",
        "event_id": "12345",
        "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
        "timestamp": "1617875568",
        "distribution": "4",
        "sharing_group_id": "1",
        "first_seen": "1581984000000000",
        "last_seen": "1581984000000000",
        "Attribute": [
          {
            "id": "12345",
            "event_id": "12345",
            "object_id": "12345",
            "object_relation": "sensor",
            "value": "127.0.0.1",
            "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
            "timestamp": "1617875568",
            "distribution": "4",
            "sharing_group_id": "1",
            "comment": "logged source ip",
            "first_seen": "1581984000000000",
            "last_seen": "1581984000000000",
            "Tag": [
              {
                "id": "12345",
                "name": "tlp:white",
                "colour": "#ffffff",
                "org_id": "12345",
                "user_id": "12345",
                "numerical_value": "12345"
              }
            ],
            "Galaxy": [
              {
                "id": "12345",
                "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
                "name": "Ransomware",
                "type": "ransomware",
                "description": "Ransomware galaxy based on ...",
                "version": "1",
                "icon": "globe",
                "namespace": "misp",
                "kill_chain_order": {
                  "fraud-tactics": [
                    "Initiation",
                    "Target Compromise",
                    "Perform Fraud",
                    "Obtain Fraudulent Assets",
                    "Assets Transfer",
                    "Monetisation"
                  ]
                }
              }
            ]
          }
        ]
      }
    ],
    "EventReport": [
      {
        "id": "12345",
        "uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
        "event_id": "12345",
        "name": "Report of the incident",
        "distribution": "4",
        "sharing_group_id": "1",
        "timestamp": "1617875568"
      }
    ],
    "Tag": [
      {
        "id": "12345",
        "name": "tlp:white",
        "colour": "#ffffff",
        "org_id": "12345",
        "user_id": "12345",
        "numerical_value": "12345"
      }
    ]
  }
]