tessl install tessl/pypi-pymisp@2.5.0Python API for MISP threat intelligence platform enabling programmatic access to MISP instances.
Agent Success
Agent success rate when using this tile
96%
Improvement
Agent success rate improvement when using this tile compared to baseline
1.25x
Baseline
Agent success rate without this tile
77%
A command-line tool for managing threat intelligence sharing configurations in MISP, enabling organizations to control data distribution and collaborate through sharing groups.
@generates
class SharingManager:
"""
Manages threat intelligence sharing configurations in MISP.
Args:
misp_url: The URL of the MISP instance
misp_key: The API key for authentication
"""
def __init__(self, misp_url: str, misp_key: str):
pass
def create_sharing_group(self, name: str, description: str) -> dict:
"""
Creates a new sharing group.
Args:
name: Name of the sharing group
description: Description of the sharing group
Returns:
Dictionary containing the created sharing group details including 'id'
"""
pass
def add_organization_to_sharing_group(self, sharing_group_id: int, org_id: int) -> bool:
"""
Adds an organization to a sharing group.
Args:
sharing_group_id: ID of the sharing group
org_id: ID of the organization to add
Returns:
True if successful, False otherwise
"""
pass
def get_sharing_group(self, sharing_group_id: int) -> dict:
"""
Retrieves sharing group details.
Args:
sharing_group_id: ID of the sharing group
Returns:
Dictionary containing sharing group details including member organizations
"""
pass
def set_event_distribution(self, event_id: int, distribution_level: int, sharing_group_id: int = None) -> bool:
"""
Sets the distribution level for an event.
Distribution levels:
0 = Organization only
1 = Community only
2 = Connected communities
3 = All communities
4 = Sharing group (requires sharing_group_id)
Args:
event_id: ID of the event
distribution_level: Distribution level (0-4)
sharing_group_id: Required when distribution_level is 4
Returns:
True if successful, False otherwise
"""
pass
def update_attribute_distribution(self, attribute_id: int, distribution_level: int) -> bool:
"""
Updates the distribution level for an attribute.
Args:
attribute_id: ID of the attribute
distribution_level: Distribution level (0-4)
Returns:
True if successful, False otherwise
"""
passProvides Python API for MISP threat intelligence platform.