From 9906c052981682937b88758bc25bc8719636a0d1 Mon Sep 17 00:00:00 2001 From: Sascha Rommelfangen Date: Mon, 22 Jul 2019 14:47:41 +0200 Subject: [PATCH] described new feature (--urlsonly, --event) --- README.md | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 730ff52..a6fb152 100644 --- a/README.md +++ b/README.md @@ -40,6 +40,14 @@ If you send a mail to mail_to_misp containing: `key:ABCDEFGHIJKLMN0PQRSTUVWXYZ` If you don't want to use this feature, just don't put it in the message body. The distribution is defined in the configuration as well: `m2m_auto_distribution = '3' # 3 = All communities` +For OSINT collection purposes (like collecting URLs to OSINT reports), you can tell `mail_to_misp` to only extract URLs (`--urlsonly`) and append them to a predefined MISP event (`--event N`). The subject of such a mail goes into the comment field of the value. + +Example: +``` +osinturlcollection: "|/path/to/mail_to_misp.py --urlsonly --event 12345 -" +``` + + # Pass parameters in the email body ``` @@ -194,5 +202,5 @@ pipenv install This software is licensed under [GNU Affero General Public License version 3](http://www.gnu.org/licenses/agpl-3.0.html) -* Copyright (C) 2017, 2018 Sascha Rommelfangen, Raphaël Vinot -* Copyright (C) 2017, 2018 CIRCL - Computer Incident Response Center Luxembourg +* Copyright (C) 2017 - 2019 Sascha Rommelfangen, Raphaël Vinot +* Copyright (C) 2017 - 2019 CIRCL - Computer Incident Response Center Luxembourg