2016-08-26 12:13:58 +02:00
|
|
|
README
|
|
|
|
======
|
|
|
|
|
2016-08-26 17:01:32 +02:00
|
|
|
[](http://pymisp.readthedocs.io/en/master/?badge=master)
|
2016-08-18 00:23:49 +02:00
|
|
|
[](https://travis-ci.org/MISP/PyMISP)
|
|
|
|
[](https://coveralls.io/github/MISP/PyMISP?branch=master)
|
|
|
|
|
2015-11-06 11:40:43 +01:00
|
|
|
# PyMISP - Python Library to access MISP
|
|
|
|
|
2014-10-29 10:45:18 +01:00
|
|
|
PyMISP is a Python library to access [MISP](https://github.com/MISP/MISP) platforms via their REST API.
|
|
|
|
|
2015-11-06 11:40:43 +01:00
|
|
|
PyMISP allows you to fetch events, add or update events/attributes, add or update samples or search for attributes.
|
|
|
|
|
|
|
|
## Requirements
|
2014-10-29 10:45:18 +01:00
|
|
|
|
|
|
|
* [requests](http://docs.python-requests.org)
|
2014-04-16 15:43:54 +02:00
|
|
|
|
2016-06-28 15:19:08 +02:00
|
|
|
## Install from pip
|
2016-08-26 12:13:58 +02:00
|
|
|
|
|
|
|
```
|
2017-02-27 11:43:46 +01:00
|
|
|
pip3 install pymisp
|
2016-08-26 12:13:58 +02:00
|
|
|
```
|
2016-06-28 15:19:08 +02:00
|
|
|
|
|
|
|
## Install the lastest version from repo
|
2014-04-16 15:43:54 +02:00
|
|
|
|
2016-08-26 12:13:58 +02:00
|
|
|
```
|
2016-06-28 15:19:08 +02:00
|
|
|
git clone https://github.com/CIRCL/PyMISP.git && cd PyMISP
|
2017-02-27 11:43:46 +01:00
|
|
|
python3 setup.py install
|
2016-08-26 12:13:58 +02:00
|
|
|
```
|
2014-04-16 15:43:54 +02:00
|
|
|
|
2016-08-18 00:23:49 +02:00
|
|
|
## Samples and how to use PyMISP
|
2014-04-16 15:43:54 +02:00
|
|
|
|
2015-11-06 11:40:43 +01:00
|
|
|
Various examples and samples scripts are in the [examples/](examples/) directory.
|
|
|
|
|
|
|
|
In the examples directory, you will need to change the keys.py.sample to enter your MISP url and API key.
|
|
|
|
|
2016-08-26 12:13:58 +02:00
|
|
|
```
|
2015-11-06 11:40:43 +01:00
|
|
|
cd examples
|
|
|
|
cp keys.py.sample keys.py
|
|
|
|
vim keys.py
|
2016-08-26 12:13:58 +02:00
|
|
|
```
|
2015-11-06 11:40:43 +01:00
|
|
|
|
|
|
|
The API key of MISP is available in the Automation section of the MISP web interface.
|
|
|
|
|
|
|
|
To test if your URL and API keys are correct, you can test with examples/last.py to
|
|
|
|
fetch the last 10 events published.
|
|
|
|
|
2016-08-26 12:13:58 +02:00
|
|
|
```
|
2015-11-06 11:40:43 +01:00
|
|
|
cd examples
|
2017-02-27 11:43:46 +01:00
|
|
|
python3 last.py -l 10
|
2016-08-26 12:13:58 +02:00
|
|
|
```
|
2014-10-29 10:45:18 +01:00
|
|
|
|
2015-11-06 11:40:43 +01:00
|
|
|
## Documentation
|
2014-10-29 10:45:18 +01:00
|
|
|
|
2017-01-18 17:27:56 +01:00
|
|
|
[PyMISP API documentation is available](https://media.readthedocs.org/pdf/pymisp/master/pymisp.pdf).
|
2014-10-29 10:45:18 +01:00
|
|
|
|
|
|
|
Documentation can be generated with epydoc:
|
|
|
|
|
2016-08-26 12:13:58 +02:00
|
|
|
```
|
|
|
|
epydoc --url https://github.com/CIRCL/PyMISP --graph all --name PyMISP --pdf pymisp -o doc
|
|
|
|
```
|