intelmq.bots.collectors.misp package

Submodules

intelmq.bots.collectors.misp.collector module

A collector for grabbing appropriately tagged events from MISP.

param - misp_url:
 URL of the MISP server
param - misp_key:
 API key for accessing MISP
param - misp_tag_to_process:
 MISP tag identifying events to be processed
param - misp_tag_processed:
 MISP tag identifying events that have been processed

PyMISP versions released after January 2020 will no longer support the “old” PyMISP class. For compatibility:

  • older versions of pymisp still work with this bot
  • the deprecated parameter misp_verify will create a DeprecationWarning
intelmq.bots.collectors.misp.collector.BOT

alias of intelmq.bots.collectors.misp.collector.MISPCollectorBot

class intelmq.bots.collectors.misp.collector.MISPCollectorBot(bot_id: str, start: bool = False, sighup_event=None, disable_multithreading: bool = None)

Bases: intelmq.lib.bot.CollectorBot

Collect events from a MISP server

init()
misp_key = '<insert MISP Authkey>'
misp_tag_processed = None
misp_tag_to_process = '<insert MISP tag for events to be processed>'
misp_url = "<insert url of MISP server (with trailing '/')>"
process()
rate_limit = 3600

Module contents