From ba2a5f7515e8a1ab148d89bf681661b159c76b77 Mon Sep 17 00:00:00 2001 From: chrisr3d Date: Tue, 6 Mar 2018 11:04:19 +0100 Subject: [PATCH] CSV import documentation first try --- doc/import_doc/csvimport.json | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 doc/import_doc/csvimport.json diff --git a/doc/import_doc/csvimport.json b/doc/import_doc/csvimport.json new file mode 100644 index 0000000..8d959af --- /dev/null +++ b/doc/import_doc/csvimport.json @@ -0,0 +1,8 @@ +{ + "description": "Module to import MISP attributes from a csv file.", + "requirements": ["PyMISP"], + "features": "In order to parse data from a csv file, a header is required to let the module know which column is matching with known attribute fields / MISP types.\nThis header is part of the configuration of the module and should be filled out in MISP plugin settings, each field separated by COMMAS. Fields that do not match with any type known in MISP can be ignored in import, using a space or simply nothing between two separators (example: 'ip-src, , comment, ').\nThere is also one type that is confused and can be either a MISP attribute type or an attribute field: 'comment'. In this case, using 'attrComment' specifies that the attribute field 'comment' should be considered, otherwise it will be considered as the MISP attribute type.\n\nFor each MISP attribute type, an attribute is created.\nAttribute fields that are imported are the following: value, type, category, to-ids, distribution, comment, tag.", + "references": ["https://tools.ietf.org/html/rfc4180", "https://tools.ietf.org/html/rfc7111"], + "input": "CSV format file.", + "output": "MISP attributes" +}