From f36304e635fdd20b4801d913415b22b24cd017b2 Mon Sep 17 00:00:00 2001
From: Koen Van Impe <koen.vanimpe@cudeso.be>
Date: Sun, 15 Mar 2015 02:20:50 +0100
Subject: [PATCH] Example file on how to get the exported IDS data from MISP

---
 INSTALL/.get-misp-automation.py.swp | Bin 0 -> 12288 bytes
 INSTALL/get-misp-automation.py      |  23 +++++++++++++++++++++++
 2 files changed, 23 insertions(+)
 create mode 100644 INSTALL/.get-misp-automation.py.swp
 create mode 100644 INSTALL/get-misp-automation.py

diff --git a/INSTALL/.get-misp-automation.py.swp b/INSTALL/.get-misp-automation.py.swp
new file mode 100644
index 0000000000000000000000000000000000000000..9a16d6db7efca6b4f50ad448db60ef7c503616d6
GIT binary patch
literal 12288
zcmeI2O>Wab6o6k5+ZF^1wo{kLiIjLsK>}6sB2t5hNNJQG)Ut`3%(%8{dyHp{8#bJQ
z18@R<4#F9@01J>{kHoW^L=l^^ExeIFk3B!{jX$qOp6TxM?jd{VJOC^=0bYE$KK^wL
z;GF}IDP_v$%gW4)W%L(Ad7Ky?ocfv<MZp)doLMfUR?bxNi@P|~DL?EE`@H*XIBNHL
z{8XA&+1m1Qqhim5Dsj^JWviloGC&4a26E%K9&N(?y?eW5+m5x(Zr>WOy6J`tkO4A4
z2FL&zAOmE843L3;-+)Os;0?YeZuzTnXHjqbQ7;~;A_HWA43GgbKnBPF86X2>fDDiU
zGC&5dpaD++eAooIyM>F#|NqPV|MwdJ-;l4!C*&g%BOwwXC&)3<LH3a?<R`}XfqX{Z
zBX1FbxClpTNR{UbdZHzh0Wv@a$N(8217v^<kO4A42L1~JzB7xImh}esPLYL1)`e%h
z29#IkvOJ5TaJuJUtx}oPGx;)?+BBR@dIBdco*hq!Nq|i<tK03|1S$((SEsq{CTsV*
zlc${%%zy!_C`aQ_e>|Ez?)ExOyRcVb))Edb64l3pUIXyrS~bmU+F~_UFHew9o*WHF
zP1ZT?9}Py6gZ8N109cFbTGg>~ooC?;U&Vs8k*+0Q$;4=$ghKP>5H3`aM9LEuELQAV
z7OZl)R$xrJ&n?_2$EnK9(hY!Z+t3z*%~hV2Z_Cc)yvejQ%mk8^5m=zKVO}DbkbaoR
zszc=_%?<OzNIJONKKJ4@lGP(q3C<{(Q49~rSA*qwnNteZJs7g;<M^41tKe0B*xBZ}
O&iFJ;csj=qkic&f?b0j&

literal 0
HcmV?d00001

diff --git a/INSTALL/get-misp-automation.py b/INSTALL/get-misp-automation.py
new file mode 100644
index 000000000..61d7591c3
--- /dev/null
+++ b/INSTALL/get-misp-automation.py
@@ -0,0 +1,23 @@
+#!/usr/bin/python
+
+'''
+Example file on how to get the exported IDS data from MISP
+
+Add your API key, set the MISP host and define the output file.
+'''
+
+import urllib2
+
+MISP_HOST="http:/"
+API_KEY=""
+EXPORT_DATA="events/nids/suricata/download"
+OUTPUT_FILE="misp-suricata"
+
+URL="%s/%s" % (MISP_HOST, EXPORT_DATA)
+request = urllib2.Request(URL)
+f = open(OUTPUT_FILE,'w')
+request.add_header('Authorization', API_KEY)
+data = urllib2.urlopen(request).read()
+f.write(data)
+f.close()
+