MISP × AmbactiBring MISP into
the flow of work.
A little less busywork with MISP.
Gather contextDo the workReview & share
Attribute6 capabilities+
- Get many attributesRead
- Get an attributeRead
- Get a filtered list of attributesRead
- Create an attributeWrite
- Delete an attributeWrite
- Update an attributeWrite
Event8 capabilities+
- Get many eventsRead
- Get an eventRead
- Get a filtered list of eventsRead
- Create an eventWrite
- Delete an eventWrite
- Publish an eventWrite
- Update an eventWrite
- Unpublish an event
Feed6 capabilities+
- Get many feedsRead
- Get a feedRead
- Create a feedWrite
- Disable a feedWrite
- Enable a feedWrite
- Update a feedWrite
Galaxy3 capabilities+
- Get many galaxiesRead
- Get a galaxyRead
- Delete a galaxyWrite
Noticelist2 capabilities+
- Get many noticelistsRead
- Get a noticelistRead
Object1 capabilities+
- Get a filtered list of objectsRead
Organisation5 capabilities+
- Get many organizationsRead
- Get an organizationRead
- Create an organizationWrite
- Delete an organizationWrite
- Update an organizationWrite
Tag4 capabilities+
- Get many tagsRead
- Create a tagWrite
- Delete a tagWrite
- Update a tagWrite
User5 capabilities+
- Get many usersRead
- Get a userRead
- Create a userWrite
- Delete a userWrite
- Update a userWrite
Warninglist2 capabilities+
- Get many warninglistsRead
- Get a warninglistRead
Event Tag2 capabilities+
- Add a tag to an eventWrite
- Remove a tag from an eventWrite
Frequently asked
questions.
What could an Ambacti integration do with MISP?
The documented operations include Attribute: Get many attributes; Attribute: Get an attribute; Attribute: Get a filtered list of attributes; Event: Get many events.
Could I keep a workflow read-only?
For a read-only workflow, limit account permissions to reading data and exclude actions that create, update, or delete records.
Will every action run automatically?
Choose which steps could run on their own and which should pause for review. Changes should follow the permissions and approval rules you set.
Do I need to review actions in MISP?
Decide which work could run on its own and which steps need your review.