misp_tag_event
Add or remove tags (TLP, MITRE ATT&CK, custom) from MISP threat intelligence events to categorize and manage security incidents.
Instructions
Add or remove a tag from a MISP event (TLP, MITRE ATT&CK, custom tags)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| eventId | Yes | Event ID to tag | |
| tag | Yes | Tag name (e.g., tlp:white, misp-galaxy:mitre-attack-pattern) | |
| remove | No | Set to true to remove the tag instead of adding |