submit_ioc_with_approval
Submit an indicator of compromise to MISP only when write access and approval are granted; otherwise returns a proposal or blocked result.
Instructions
Submit an IOC (attribute) to MISP only when write is enabled, role permits write, and approval (when required) has been explicitly given. Otherwise returns a blocked/proposal result.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| type | Yes | ||
| value | Yes | ||
| to_ids | No | ||
| comment | No | ||
| approved | No | ||
| category | No | ||
| event_id | Yes | ||
| approval_token | No | ||
| approval_request_id | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||