propose_attribute
Propose adding an attribute to a MISP event without writing to the database. This safe, auditable proposal includes type, value, and optional fields for review.
Instructions
Build an attribute creation proposal for an existing event. Never writes to MISP.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| type | Yes | ||
| value | Yes | ||
| to_ids | No | ||
| comment | No | ||
| category | No | ||
| event_id | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||