misp-training/a.7-rest-API/postman/MISP-training.postman_colle...

1429 lines
27 KiB
JSON

{
"info": {
"_postman_id": "1b4b6bb1-83ca-4829-b5f2-6772fc2b7c18",
"name": "MISP-training",
"schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
},
"item": [
{
"name": "attributes",
"item": [
{
"name": "add attribute (minimal)",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "{\n \"value\": \"10.0.0.10\",\n \"type\": \"ip-dst\"\n}"
},
"url": {
"raw": "{{base_url}}/attributes/add/{{event_id}}",
"host": [
"{{base_url}}"
],
"path": [
"attributes",
"add",
"{{event_id}}"
]
}
},
"response": []
},
{
"name": "add attribute (extended)",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "{\n \"value\": \"evil.com\",\n \"type\": \"domain\",\n \"to_ids\": true,\n \"disable_correlation\": true,\n \"comment\": \"This domain was used as a C2\",\n \"first_seen\": \"2021-11-23 10:10:53\"\n}"
},
"url": {
"raw": "{{base_url}}/attributes/add/{{event_id}}",
"host": [
"{{base_url}}"
],
"path": [
"attributes",
"add",
"{{event_id}}"
]
}
},
"response": []
},
{
"name": "index attributes",
"request": {
"method": "GET",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/attributes",
"host": [
"{{base_url}}"
],
"path": [
"attributes"
]
}
},
"response": []
},
{
"name": "view attribute",
"request": {
"method": "GET",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/attributes/view/{{attribute_id}}",
"host": [
"{{base_url}}"
],
"path": [
"attributes",
"view",
"{{attribute_id}}"
]
}
},
"response": []
},
{
"name": "restSearch attributes 1",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "{\n \"type\": \"domain\",\n \"page\": \"1\",\n \"limit\": \"10\",\n \"to_ids\": true,\n \"tags\": {\n \"AND\": [\n \"Backdoor\"\n ],\n \"NOT\": [\n \"tlp:red\",\n \"%ransomware%\"\n ]\n }\n}"
},
"url": {
"raw": "{{base_url}}/attributes/restSearch",
"host": [
"{{base_url}}"
],
"path": [
"attributes",
"restSearch"
]
}
},
"response": []
},
{
"name": "restSearch attributes 2",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "{\n \"page\": \"1\",\n \"limit\": \"10\",\n \"type\": \"ip-src\",\n \"value\": \"10.0.0.%\",\n \"returnFormat\": \"xml\"\n}"
},
"url": {
"raw": "{{base_url}}/attributes/restSearch",
"host": [
"{{base_url}}"
],
"path": [
"attributes",
"restSearch"
]
}
},
"response": []
},
{
"name": "edit attribute",
"request": {
"method": "PUT",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "{\n \"comment\": \"eicar malware test file\",\n \"to_ids\": true,\n \"disable_correlation\": true,\n \"first_seen\": \"2021-11-20 10:10:53\",\n \"last_seen\": \"2021-11-23 10:10:53\"\n}"
},
"url": {
"raw": "{{base_url}}/attributes/edit/{{attribute_id}}",
"host": [
"{{base_url}}"
],
"path": [
"attributes",
"edit",
"{{attribute_id}}"
]
}
},
"response": []
},
{
"name": "delete attribute",
"request": {
"method": "DELETE",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/attributes/{{attribute_id}}",
"host": [
"{{base_url}}"
],
"path": [
"attributes",
"{{attribute_id}}"
]
}
},
"response": []
}
]
},
{
"name": "events",
"item": [
{
"name": "add event (minimal)",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "{\n \"info\": \"My new event\"\n}"
},
"url": {
"raw": "{{base_url}}/events/add",
"host": [
"{{base_url}}"
],
"path": [
"events",
"add"
]
}
},
"response": []
},
{
"name": "add event (extended)",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "{\n \"info\": \"My new event\",\n \"org_id\": \"1\",\n \"distribution\": \"0\",\n \"orgc_id\": \"1\",\n \"date\": \"2021-11-20\",\n \"published\": false,\n \"analysis\": \"0\",\n \"proposal_email_lock\": true,\n \"threat_level_id\": \"1\",\n \"publish_timestamp\": \"1617875568\",\n \"sighting_timestamp\": \"1617875568\",\n \"disable_correlation\": true,\n \"event_creator_email\": \"user@example.com\"\n}"
},
"url": {
"raw": "{{base_url}}/events/add",
"host": [
"{{base_url}}"
],
"path": [
"events",
"add"
]
}
},
"response": []
},
{
"name": "index events",
"request": {
"method": "GET",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/events",
"host": [
"{{base_url}}"
],
"path": [
"events"
]
}
},
"response": []
},
{
"name": "index events (xml)",
"request": {
"method": "GET",
"header": [
{
"key": "Accept",
"value": "text/xml",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/events/",
"host": [
"{{base_url}}"
],
"path": [
"events",
""
]
}
},
"response": []
},
{
"name": "index events (csv)",
"request": {
"method": "GET",
"header": [
{
"key": "Accept",
"value": "text/csv",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/events/",
"host": [
"{{base_url}}"
],
"path": [
"events",
""
]
}
},
"response": []
},
{
"name": "view event",
"request": {
"method": "GET",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/events/view/{{event_id}}",
"host": [
"{{base_url}}"
],
"path": [
"events",
"view",
"{{event_id}}"
]
}
},
"response": []
},
{
"name": "edit event",
"request": {
"method": "PUT",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "{\n \"info\": \"My new event (foobar)\",\n \"analysis\": \"1\"\n}"
},
"url": {
"raw": "{{base_url}}/events/edit/{{event_id}}",
"host": [
"{{base_url}}"
],
"path": [
"events",
"edit",
"{{event_id}}"
]
}
},
"response": []
},
{
"name": "restSearch events w/Attachments",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "{\n \"page\": \"1\",\n \"limit\": \"10\",\n \"publish_timestamp\": \"30d\",\n \"withAttachments\": true,\n \"category\": \"Payload delivery\"\n}"
},
"url": {
"raw": "{{base_url}}/events/restSearch",
"host": [
"{{base_url}}"
],
"path": [
"events",
"restSearch"
]
}
},
"response": []
},
{
"name": "restSearch events (xml)",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "{\n \"page\": \"1\",\n \"limit\": \"10\",\n \"metadata\": true,\n \"tags\": \"Backdoor\",\n \"returnFormat\": \"xml\"\n}"
},
"url": {
"raw": "{{base_url}}/events/restSearch",
"host": [
"{{base_url}}"
],
"path": [
"events",
"restSearch"
]
}
},
"response": []
},
{
"name": "publish event",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/events/publish/{{event_id}}",
"host": [
"{{base_url}}"
],
"path": [
"events",
"publish",
"{{event_id}}"
]
}
},
"response": []
},
{
"name": "unpublish event",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/events/unpublish/{{event_id}}",
"host": [
"{{base_url}}"
],
"path": [
"events",
"unpublish",
"{{event_id}}"
]
}
},
"response": []
},
{
"name": "delete event",
"request": {
"method": "DELETE",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": ""
},
"url": {
"raw": "{{base_url}}/events/delete/{{event_id}}",
"host": [
"{{base_url}}"
],
"path": [
"events",
"delete",
"{{event_id}}"
]
}
},
"response": []
}
]
},
{
"name": "sightings",
"item": [
{
"name": "index sightings",
"request": {
"method": "GET",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/sightings/index",
"host": [
"{{base_url}}"
],
"path": [
"sightings",
"index"
]
}
},
"response": []
},
{
"name": "add sighting",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "{\n \"timestamp\": 1622535500\n}"
},
"url": {
"raw": "{{base_url}}/sightings/add/{{attribute_id}}",
"host": [
"{{base_url}}"
],
"path": [
"sightings",
"add",
"{{attribute_id}}"
]
}
},
"response": []
},
{
"name": "delete sighting",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/sightings/delete/{{sighting_id}}",
"host": [
"{{base_url}}"
],
"path": [
"sightings",
"delete",
"{{sighting_id}}"
]
}
},
"response": []
}
]
},
{
"name": "warning_lists",
"item": [
{
"name": "index warninglists",
"request": {
"method": "GET",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/warninglists",
"host": [
"{{base_url}}"
],
"path": [
"warninglists"
]
}
},
"response": []
},
{
"name": "view warninglist",
"request": {
"method": "GET",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/warninglists/view/{{warning_list_id}}",
"host": [
"{{base_url}}"
],
"path": [
"warninglists",
"view",
"{{warning_list_id}}"
]
}
},
"response": []
},
{
"name": "toggleEnable warninglist",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "{\n \"id\": {{warning_list_id}}\n}"
},
"url": {
"raw": "{{base_url}}/warninglists/toggleEnable",
"host": [
"{{base_url}}"
],
"path": [
"warninglists",
"toggleEnable"
]
}
},
"response": []
},
{
"name": "check value",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "[\n \"104.155.11.149\"\n]"
},
"url": {
"raw": "{{base_url}}/warninglists/checkValue",
"host": [
"{{base_url}}"
],
"path": [
"warninglists",
"checkValue"
]
}
},
"response": []
},
{
"name": "delete warninglist",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/warninglists/delete/{{warning_list_id}}",
"host": [
"{{base_url}}"
],
"path": [
"warninglists",
"delete",
"{{warning_list_id}}"
]
}
},
"response": []
}
],
"description": "https://www.misp-project.org/documentation/openapi.html"
},
{
"name": "users",
"item": [
{
"name": "add user",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "{\n \"org_id\": \"1\",\n \"email\": \"user@misp.local\"\n}"
},
"url": {
"raw": "{{base_url}}/admin/users/add",
"host": [
"{{base_url}}"
],
"path": [
"admin",
"users",
"add"
]
}
},
"response": []
},
{
"name": "users",
"request": {
"method": "GET",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/users/admin_index",
"host": [
"{{base_url}}"
],
"path": [
"users",
"admin_index"
]
}
},
"response": []
},
{
"name": "search users",
"request": {
"method": "GET",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/users/admin_index/value:user@admin.test",
"host": [
"{{base_url}}"
],
"path": [
"users",
"admin_index",
"value:user@admin.test"
]
}
},
"response": []
},
{
"name": "initiate password reset",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/users/initiatePasswordReset/{{user_id}}",
"host": [
"{{base_url}}"
],
"path": [
"users",
"initiatePasswordReset",
"{{user_id}}"
]
}
},
"response": []
},
{
"name": "delete user",
"request": {
"method": "DELETE",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/admin/users/delete/{{user_id}}",
"host": [
"{{base_url}}"
],
"path": [
"admin",
"users",
"delete",
"{{user_id}}"
]
}
},
"response": []
}
]
},
{
"name": "servers",
"item": [
{
"name": "settings",
"item": [
{
"name": "server get settings",
"request": {
"method": "GET",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/servers/serverSettings",
"host": [
"{{base_url}}"
],
"path": [
"servers",
"serverSettings"
]
}
},
"response": []
},
{
"name": "server get setting by name",
"request": {
"method": "GET",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/servers/getSetting/MISP.live",
"host": [
"{{base_url}}"
],
"path": [
"servers",
"getSetting",
"MISP.live"
]
}
},
"response": []
},
{
"name": "edit setting",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "{\n \"value\": true\n}"
},
"url": {
"raw": "{{base_url}}/servers/serverSettingsEdit/MISP.live/null/1",
"host": [
"{{base_url}}"
],
"path": [
"servers",
"serverSettingsEdit",
"MISP.live",
"null",
"1"
]
}
},
"response": []
}
]
},
{
"name": "index servers",
"request": {
"method": "GET",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/servers",
"host": [
"{{base_url}}"
],
"path": [
"servers"
]
}
},
"response": []
},
{
"name": "pull server",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/servers/pull/{{server_id}}",
"host": [
"{{base_url}}"
],
"path": [
"servers",
"pull",
"{{server_id}}"
]
}
},
"response": []
},
{
"name": "push server",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/servers/push/{{server_id}}",
"host": [
"{{base_url}}"
],
"path": [
"servers",
"push",
"{{server_id}}"
]
}
},
"response": []
},
{
"name": "update server",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "{\n \"branch\": \"2.4\"\n}"
},
"url": {
"raw": "{{base_url}}/servers/update",
"host": [
"{{base_url}}"
],
"path": [
"servers",
"update"
]
}
},
"response": []
}
]
},
{
"name": "feeds",
"item": [
{
"name": "index feeds",
"request": {
"method": "GET",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/feeds/index",
"host": [
"{{base_url}}"
],
"path": [
"feeds",
"index"
]
}
},
"response": []
},
{
"name": "view feed",
"request": {
"method": "GET",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/feeds/view/{{feed_id}}",
"host": [
"{{base_url}}"
],
"path": [
"feeds",
"view",
"{{feed_id}}"
]
}
},
"response": []
},
{
"name": "fetch from feed",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/feeds/fetchFromFeed/{{feed_id}}",
"host": [
"{{base_url}}"
],
"path": [
"feeds",
"fetchFromFeed",
"{{feed_id}}"
]
}
},
"response": []
},
{
"name": "fetch from all feeds",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/feeds/fetchFromAllFeeds",
"host": [
"{{base_url}}"
],
"path": [
"feeds",
"fetchFromAllFeeds"
]
}
},
"response": []
},
{
"name": "enable feed",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/feeds/enable/{{feed_id}}",
"host": [
"{{base_url}}"
],
"path": [
"feeds",
"enable",
"{{feed_id}}"
]
}
},
"response": []
},
{
"name": "disable feed",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"url": {
"raw": "{{base_url}}/feeds/disable/{{feed_id}}",
"host": [
"{{base_url}}"
],
"path": [
"feeds",
"disable",
"{{feed_id}}"
]
}
},
"response": []
}
]
},
{
"name": "logs",
"item": [
{
"name": "index logs",
"request": {
"method": "POST",
"header": [
{
"key": "Accept",
"value": "application/json",
"type": "text"
},
{
"key": "Content-Type",
"value": "application/json",
"type": "text"
}
],
"body": {
"mode": "raw",
"raw": "{\n \"page\": 1,\n \"limit\": 10,\n \"created\": \"1d\"\n}",
"options": {
"raw": {
"language": "json"
}
}
},
"url": {
"raw": "{{base_url}}/admin/logs",
"host": [
"{{base_url}}"
],
"path": [
"admin",
"logs"
]
}
},
"response": []
}
]
}
],
"auth": {
"type": "apikey",
"apikey": [
{
"key": "value",
"value": "{{api_auth_key}}",
"type": "string"
},
{
"key": "key",
"value": "Authorization",
"type": "string"
}
]
},
"event": [
{
"listen": "prerequest",
"script": {
"type": "text/javascript",
"exec": [
""
]
}
},
{
"listen": "test",
"script": {
"type": "text/javascript",
"exec": [
""
]
}
}
]
}