misp_export_iocs
Export threat intelligence indicators from MISP in formats like CSV, STIX, Suricata, Snort, text, or RPZ for analysis and integration.
Instructions
Export IOCs from MISP in various formats (CSV, STIX, Suricata, Snort, text, RPZ)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| format | Yes | Export format | |
| eventId | No | Specific event ID (or all events if omitted) | |
| type | No | Filter by attribute type | |
| tags | No | Filter by tags | |
| last | No | Relative time filter (e.g., 1d, 7d) |