misp_get_related_events
Find events related to a specific event using shared attribute correlations. Input an event ID to retrieve linked events and expand threat intelligence analysis.
Instructions
Get events related to a specific event through shared attributes and correlations
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| eventId | Yes | Event ID to find related events for | |
| maxAttributes | No | Max number of to_ids attributes to correlate across (default 20). Higher values hit the MISP API more. | |
| perAttributeLimit | No | Max matches to fetch per attribute value (default 100). |