create event from report example - edit

pull/31/head
Déborah Servili 2016-11-28 09:30:18 +01:00
parent dd7528c46c
commit fc57023b3b
3 changed files with 3 additions and 3 deletions

View File

@ -2,7 +2,7 @@
You need specific permission to create an event.
For this example, I choose a report found on (Bleeping Computer)[http://www.bleepingcomputer.com/news/security/researcher-finds-the-karma-ransomware-being-distributed-via-pay-per-install-network/], so OSINT.
For this example, I choose a report found on [Bleeping Computer](http://www.bleepingcomputer.com/news/security/researcher-finds-the-karma-ransomware-being-distributed-via-pay-per-install-network/), so OSINT.
![Report title](figures/report_title.png)
@ -63,7 +63,7 @@ Again, we fill it with the required data.
Then we submit it by clicking on the blue button
_Et voilà!_
![MAGIC](figures/popadd.png)
![MAGIC](figures/popadded.png)
Okay, now it is time to get serious and add some Indicators of Compromise. In this report, they are mainly listed at the end.
@ -99,7 +99,7 @@ Here, MISP detected by itself what should be the category and type associated to
If the results of MISP were not what you expected, you can still modify it, however MISP will only suggest suitable category/type regarding the format of your data. You can change this for each attribute individually or all at the same time using the option on the bottom right of the form. The same principle also applies for the comments, individually or for all.
![freetext import suggestions](figures/freesuggest.png)
![freetext import suggestions](figures/freesuggest.png)
(Yes I have two cursors, MISP is magic!)
We only have have the network indicators left, and as you might have guessed, we will let MISP determined for us which type is the best for the data we will give it. So let us go for it.

Binary file not shown.

Before

Width:  |  Height:  |  Size: 88 KiB

After

Width:  |  Height:  |  Size: 84 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 81 KiB

After

Width:  |  Height:  |  Size: 78 KiB