add_sighting_with_approval
Add a sighting to MISP with policy-checked approval to ensure only authorized submissions are recorded, blocking or flagging unauthorized ones.
Instructions
Add a sighting to MISP only when policy and approval allow. Otherwise returns a blocked/proposal result.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| value | No | ||
| source | No | ||
| approved | No | ||
| event_id | No | ||
| attribute_id | No | ||
| sighting_type | No | 0 |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||