MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity
misp-modules/documentation/website/export_mod/cef_export.json

10 lines
819 B
JSON
Raw Normal View History

chg: [documentation] Cleaner documentation directories & auto-generation Including: - A move of the previous `doc` and `docs` directories to `documentation` - `documentation` is now the default directory - The documentation previously under `doc` is now in `documentation/website` - The mkdocs previously under `docs` is now in `documentation/mkdocs` - All single JSON documentation files have been JQed - Some small improvements to list fields displaying
2020-11-17 19:36:19 +01:00
{
"description": "Module to export a MISP event in CEF format.",
"requirements": [],
"features": "The module takes a MISP event in input, to look every attribute. Each attribute matching with some predefined types is then exported in Common Event Format.\nThus, there is no particular feature concerning MISP Events since any event can be exported. However, 4 configuration parameters recognized by CEF format are required and should be provided by users before exporting data: the device vendor, product and version, as well as the default severity of data.",
"references": [
"https://community.softwaregrp.com/t5/ArcSight-Connectors/ArcSight-Common-Event-Format-CEF-Guide/ta-p/1589306?attachment-id=65537"
],
"input": "MISP Event attributes",
"output": "Common Event Format file"
}