misp_add_object
Add a structured group of attributes to a MISP event using a template. Define attributes with types and values to enhance threat intelligence context.
Instructions
Add a MISP object (structured group of attributes) to an event
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| eventId | Yes | Event ID to add the object to | |
| templateName | Yes | Object template name (e.g., file, domain-ip, email, network-connection, url) | |
| attributes | Yes | Attributes to include in the object | |
| comment | No | Object-level comment | |
| distribution | No | Distribution level (0-4) |