misp_add_object
Add structured groups of attributes, such as file or domain-ip objects, to a MISP event to organize related indicators and enrich threat intelligence.
Instructions
Add a MISP object (structured group of attributes) to an event
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| comment | No | Object-level comment | |
| eventId | Yes | Event ID to add the object to | |
| attributes | Yes | Attributes to include in the object | |
| distribution | No | Distribution level (0-4) | |
| templateName | Yes | Object template name (e.g., file, domain-ip, email, network-connection, url) |