MISP/tools/misp-wipe/misp-wipe.sql

-- Clear tables that should be empty
TRUNCATE `attachment_scans`;
TRUNCATE `attributes`;
TRUNCATE `attribute_tags`;
TRUNCATE `cake_sessions`;
TRUNCATE `cerebrates`;
TRUNCATE `correlation_exclusions`;
TRUNCATE `correlations`;
TRUNCATE `dashboards`;
TRUNCATE `decaying_model_mappings`;
TRUNCATE `decaying_models`;
TRUNCATE `events`;
TRUNCATE `event_blocklists`;
TRUNCATE `event_delegations`;
TRUNCATE `event_graph`;
TRUNCATE `event_locks`;
TRUNCATE `event_reports`;
TRUNCATE `event_tags`;
TRUNCATE `favourite_tags`;
TRUNCATE `inbox`;
TRUNCATE `jobs`;
TRUNCATE `logs`;
TRUNCATE `notification_logs`;
TRUNCATE `objects`;
TRUNCATE `object_references`;
TRUNCATE `object_relationships`;
TRUNCATE `object_templates`;
TRUNCATE `object_template_elements`;
TRUNCATE `org_blocklists`;
TRUNCATE `posts`;
TRUNCATE `rest_client_histories`;
TRUNCATE `servers`;
TRUNCATE `shadow_attributes`;
TRUNCATE `shadow_attribute_correlations`;
TRUNCATE `sharing_groups`;
TRUNCATE `sharing_group_orgs`;
TRUNCATE `sharing_group_servers`;
TRUNCATE `sightingdb_orgs`;
TRUNCATE `sightingdbs`;
TRUNCATE `sightings`;
TRUNCATE `tag_collections`;
TRUNCATE `tag_collection_tags`;
TRUNCATE `tags`;
TRUNCATE `threads`;
TRUNCATE `bruteforces`;
TRUNCATE `news`;
TRUNCATE `template_tags`;
TRUNCATE `allowedlist`;
TRUNCATE `event_locks`;
TRUNCATE `fuzzy_correlate_ssdeep`;
TRUNCATE `tasks`;
TRUNCATE `user_settings`;

-- Clear tables that can be re-populated
TRUNCATE `taxonomies`;
TRUNCATE `taxonomy_entries`;
TRUNCATE `taxonomy_predicates`;
TRUNCATE `warninglists`;
TRUNCATE `warninglist_entries`;
TRUNCATE `warninglist_types`;
TRUNCATE `galaxies`;
TRUNCATE `galaxy_cluster_blocklists`;
TRUNCATE `galaxy_cluster_relation_tags`;
TRUNCATE `galaxy_cluster_relations`;
TRUNCATE `galaxy_clusters`;
TRUNCATE `galaxy_elements`;
TRUNCATE `noticelists`;
TRUNCATE `noticelist_entries`;
TRUNCATE `decaying_models`;
TRUNCATE `decaying_model_mappings`;

-- Clear tables that have defaults
TRUNCATE `feeds`;
TRUNCATE `regexp`;
TRUNCATE `roles`;
TRUNCATE `threat_levels`;
TRUNCATE `templates`;
TRUNCATE `template_elements`;
TRUNCATE `template_element_attributes`;
TRUNCATE `template_element_files`;
TRUNCATE `template_element_texts`;

-- Remove entries from tables and reset index
DELETE FROM `users` WHERE id > 1;
ALTER TABLE `users` AUTO_INCREMENT = 2;
DELETE FROM `auth_keys` WHERE id > 1;
ALTER TABLE `auth_keys` AUTO_INCREMENT = 2;
DELETE FROM `organisations` WHERE id > 1;
ALTER TABLE `organisations` AUTO_INCREMENT = 2;