misp_update_event
Update a MISP event's metadata: info, threat level, and analysis status. Use this tool to modify event details; publishing must be done separately.
Instructions
Update an existing MISP event's metadata (info, threat level, analysis status). Publishing is separate - use misp_publish_event.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| info | No | New event description | |
| eventId | Yes | Event ID to update | |
| analysis | No | 0=Initial, 1=Ongoing, 2=Complete | |
| threatLevel | No | 1=High, 2=Medium, 3=Low, 4=Undefined |