MISP
/
misp-book
mirror of https://github.com/MISP/misp-book
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [managing-feeds] fix #206

pull/207/head
Alexandre Dulaunoy 2021-01-29 23:16:56 +01:00
parent f706e01f41
commit 9cd79aa118
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
managing-feeds/README.md
View File

@ -84,3 +84,12 @@ To remove a tag (resp. organisation), select it in the list and click on the arr
If an indicator from an feed matches an indicator within a MISP event, it will show up as "Feed hits" in the event overview. If an indicator from an feed matches an indicator within a MISP event, it will show up as "Feed hits" in the event overview.
The correlation will not show up in the correlation graph of the event. The correlation will not show up in the correlation graph of the event.
## Default feeds
The MISP project supplies a list of open-source feeds. You can load these feed definitions
by using the 'Load default feed metadata' feature on the Feeds page. This feature creates new
feeds by importing the entries in file app/files/feed-metadata/defaults.json to the database.
Existing feeds are not changed. The feature checks for duplicates using the feed URL. If a feed
with the same URL already exists in the database, that entry is not imported. This ensures that
local modifications such as name, distribution or enabled status are never overwritten.