misp_create_event
Create a new MISP event to document security incidents or threat intelligence with configurable sharing levels, threat assessments, and analysis status.
Instructions
Create a new MISP event for documenting incidents or threat intelligence
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| info | Yes | Event description/title | |
| distribution | Yes | 0=Organization only, 1=Community, 2=Connected communities, 3=All communities, 4=Sharing group | |
| threatLevel | Yes | 1=High, 2=Medium, 3=Low, 4=Undefined | |
| analysis | Yes | 0=Initial, 1=Ongoing, 2=Complete | |
| date | No | Event date (YYYY-MM-DD) | |
| tags | No | Tags to apply | |
| published | No | Publish immediately |