misp_export_iocs
Export threat intelligence indicators from MISP in multiple formats such as CSV, STIX, Suricata, Snort, text, or RPZ. Filter by event, tag, type, or time range to get targeted IOC exports.
Instructions
Export IOCs from MISP in various formats (CSV, STIX, Suricata, Snort, text, RPZ)
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| last | No | Relative time filter (e.g., 1d, 7d) | |
| tags | No | Filter by tags | |
| type | No | Filter by attribute type | |
| format | Yes | Export format | |
| eventId | No | Specific event ID (or all events if omitted) |