or run

tessl search
Log in

Version

Workspace
tessl
Visibility
Public
Created
Last updated
Describes
pypipkg:pypi/pymisp@2.5.x

evals

scenario-5

rubric.jsontask.md
tile.json

tessl/pypi-pymisp

tessl install tessl/pypi-pymisp@2.5.0

Python API for MISP threat intelligence platform enabling programmatic access to MISP instances.

Agent Success

Agent success rate when using this tile

96%

Improvement

Agent success rate improvement when using this tile compared to baseline

1.25x

Baseline

Agent success rate without this tile

77%

task.mdevals/scenario-5/

Social Media Threat Tracker

A tool for tracking and analyzing social media posts related to cybersecurity threats, including potential disinformation campaigns and malicious content distribution.

Capabilities

Parse Social Media Posts

  • Parse a social media post dictionary with fields (platform, username, post_text, post_url, timestamp) and create a structured object @test
  • Extract and store embedded URLs from post text as separate attributes @test
  • Handle posts with reply-to relationships by storing the parent post URL @test

Classify Post Content

  • Classify a post as "Informative" when classification field is set to "informative" @test
  • Classify a post as "Disinformation" when classification field is set to "disinformation" @test
  • Store user verification status (verified/unverified) as an attribute @test

Add to Threat Intelligence Platform

  • Add a parsed social media object to a MISP event @test
  • Create a new MISP event and add multiple social media objects to it @test

Implementation

@generates

API

def parse_social_media_post(post_data: dict) -> object:
    """
    Parse social media post data and create a MISP object.

    Parameters:
    - post_data: Dictionary containing:
        - platform (str): Social media platform name
        - username (str): Username/handle
        - post_text (str): Post content
        - post_url (str): URL to the post
        - timestamp (str): Post timestamp
        - embedded_links (list, optional): URLs embedded in post
        - reply_to (str, optional): URL of parent post if this is a reply
        - verified (bool, optional): User verification status
        - classification (str, optional): Content classification

    Returns:
    A MISP object representing the social media post
    """

def add_social_media_to_event(misp_connection, event_id: str, social_media_object) -> dict:
    """
    Add a social media object to an existing MISP event.

    Parameters:
    - misp_connection: PyMISP connection object
    - event_id: Target MISP event ID
    - social_media_object: Social media MISP object to add

    Returns:
    Response from MISP API
    """

def create_event_with_social_media(misp_connection, event_info: str, social_media_posts: list) -> dict:
    """
    Create a new MISP event and add multiple social media objects.

    Parameters:
    - misp_connection: PyMISP connection object
    - event_info: Event description
    - social_media_posts: List of parsed social media objects

    Returns:
    Created MISP event with added objects
    """

Dependencies { .dependencies }

pymisp { .dependency }

Provides Python API for MISP threat intelligence platform.