misp_check_warninglists
Check if indicators like IPs, domains, or hashes appear on known benign or false-positive lists to reduce alert noise in threat intelligence analysis.
Instructions
Check if an observable value appears on any MISP warninglists (known benign/false positive lists)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| value | Yes | Value to check against warninglists (IP, domain, hash, etc.) |