dfir-iris / iris-misp-module Goto Github PK

The wheel of iris_interface (https://github.com/dfir-iris/iris-misp-module/blob/master/dependencies/iris_interface-1.1-py3-none-any.whl) is commited in the dependencies directory. Is this necessary?

Hi there, I am looking for documentation on the report templates for the MISP reports. Something like the Jinja keywords to use etc, maybe an example template.

I tried looking thru the tree but I haven't been able to find one yet.

edit: I am looking at my instance and going thru the default template.

Quick question - Is there no way at this time to directly determine which fields returned from MISP are displayed to the page?

There is not much in the documentation supporting this module.

My main question is... what username does IRIS use to connect to MISP?

Is it the username of the person running the MISP insight? or... does it use their email address configured on their profile?

I just need to make sure whatever user is being used, is made within MISP, and that I give IRIS their API key...