diff --git a/README.md b/README.md index 3a2e69d..2f135ad 100644 --- a/README.md +++ b/README.md @@ -38,15 +38,29 @@ Thunderbird will be targeted soon. 2. Create a mail rule based on your needs, executing the AppleScript defined before 3. Configure mail_to_misp_config.py +### Thunderbird + +1. Git clone https://github.com/rommelfs/filterscript and install plugin (instructions within the project description) +2. Mail rule script +- git clone this repository +- open the bash script MUA/Mozilla/Thunderbird/thunderbird_wrapper.sh and adujst the paths +- adjust the path to the python installation and location of the mail_to_misp.py script +3. Create a mail rule based on your needs, executing the thunderbird_wrapper.sh script +4. Configure mail_to_misp_config.py + You should be able to create MISP events now. ## Requirements +### General + - mail_to_misp requires access to a MISP instance (via API). - urlmarker from https://github.com/rcompton/ryancompton.net/blob/master/assets/praw_drugs/urlmarker.py (contained in this project) - defang from https://bitbucket.org/johannestaas/defang - Optionally patch defang/defang/__init__.py and add dirty_line = dirty_line.replace('hXXp', 'http') at line 47 +### Thunderbird +- https://github.com/rommelfs/filterscript (modified fork from https://github.com/adamnew123456/filterscript)