types are now described

pull/5/head
Alexandre Dulaunoy 2016-03-20 19:54:32 +01:00
parent 43e6273172
commit 57a9ada5bf
1 changed files with 15 additions and 0 deletions

View File

@ -9,6 +9,7 @@ MISP modules support is included in MISP starting from version 2.4.X.
## Existing MISP modules ## Existing MISP modules
* [CVE](modules/expansion/cve.py) - a hover module to give more information about a vulnerability (CVE).
* [DNS](modules/expansion/dns.py) - a simple module to resolve MISP attributes like hostname and domain to expand IP addresses attributes. * [DNS](modules/expansion/dns.py) - a simple module to resolve MISP attributes like hostname and domain to expand IP addresses attributes.
* [passivetotal](modules/expansion/passivetotal.py) - a [passivetotal](https://www.passivetotal.org/) module to query the passivetotal passive DNS interface. * [passivetotal](modules/expansion/passivetotal.py) - a [passivetotal](https://www.passivetotal.org/) module to query the passivetotal passive DNS interface.
* [sourcecache](modules/expansion/sourcecache.py) - a module to cache a specific link from a MISP instance. * [sourcecache](modules/expansion/sourcecache.py) - a module to cache a specific link from a MISP instance.
@ -32,9 +33,23 @@ If your module requires additional configuration (to be exposed via the MISP use
"username", "username",
"password" "password"
], ],
"module-type": [
"expansion",
"hover"
],
... ...
~~~ ~~~
### Module type
A MISP module can be of two types:
- **expansion** - service related to an attribute that can be used to extend and update an existing event.
- **hover** - service related to an attribute to provide additional information to the users without updating the event.
module-type is an array where the list of supported types can be added.
## Testing your modules? ## Testing your modules?
MISP uses the **modules** function to discover the available MISP modules and their supported MISP attributes: MISP uses the **modules** function to discover the available MISP modules and their supported MISP attributes: