misp-gateway

A Python (FastAPI) based API gateway for MISP.

What is for

  • To prevent adding false positives
  • To enrich an event / attribute

How it works

The gateway works as a proxy for a MISP server. You can intercept a request to a MISP server and transform it as you want.

You can set transform functions for the following API endpoints.

  • POST /events/add
  • PUT /events/edit/{event_id}
  • POST /events/edit/{event_id}
  • POST /attributes/add/{event_id}
  • PUT /attributes/edit/{attribute_id}
  • POST /attributes/edit/{attribute_id}

You can use all other MISP API endpoints via the gateway. But note that a request is just proxied to a server.

Docs

GitHub

View Github