add_sighting_with_approval
Add a sighting to MISP only when policy compliance and explicit approval are met. Otherwise, return a blocked or proposal result.
Instructions
Add a sighting to MISP only when policy and approval allow. Otherwise returns a blocked/proposal result.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| value | No | ||
| source | No | ||
| approved | No | ||
| event_id | No | ||
| attribute_id | No | ||
| sighting_type | No | 0 | |
| approval_token | No | ||
| approval_request_id | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||