mirror of https://github.com/MISP/PyMISP
40 lines
1.3 KiB
Python
40 lines
1.3 KiB
Python
|
# Your MISP's URL
|
||
|
|
url = ''
|
||
|
|
|
||
|
|
# The auth key to the MISP user that you wish to use. Make sure that the
|
||
|
|
# user has auth_key access
|
||
|
|
key = ''
|
||
|
|
|
||
|
|
# Should the certificate be validated?
|
||
|
|
ssl = False
|
||
|
|
|
||
|
|
# The output dir for the feed. This will drop a lot of files, so make
|
||
|
|
# sure that you use a directory dedicated to the feed
|
||
|
|
outputdir = 'output'
|
||
|
|
|
||
|
|
# The filters to be used for by the feed. You can use any filter that
|
||
|
|
# you can use on the event index, such as organisation, tags, etc.
|
||
|
|
# It uses the same joining and condition rules as the API parameters
|
||
|
|
# For example:
|
||
|
|
# filters = {'tag':'tlp:white|feed-export|!privint','org':'CIRCL'}
|
||
|
|
# the above would generate a feed for all events created by CIRCL, tagged
|
||
|
|
# tlp:white and/or feed-export but exclude anything tagged privint
|
||
|
|
filters = {}
|
||
|
|
|
||
|
|
|
||
|
|
# By default all attributes will be included in the feed generation
|
||
|
|
# Remove the levels that you do not wish to include in the feed
|
||
|
|
# Use this to further narrow down what gets exported, for example:
|
||
|
|
# Setting this to ['3', '5'] will exclude any attributes from the feed that
|
||
|
|
# are not exportable to all or inherit the event
|
||
|
|
#
|
||
|
|
# The levels are as follows:
|
||
|
|
# 0: Your Organisation Only
|
||
|
|
# 1: This Community Only
|
||
|
|
# 2: Connected Communities
|
||
|
|
# 3: All
|
||
|
|
# 4: Sharing Group
|
||
|
|
# 5: Inherit Event
|
||
|
|
valid_attribute_distribution_levels = ['0', '1', '2', '3', '4', '5']
|
||
|
|
|