Galaxy Cluster
Add galaxy cluster:
GET
https://misp.local/galaxies
Request:
{
"id": "12345",
"uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"collection_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"type": "mitre-enterprise-attack-attack-pattern",
"value": "Brute Force - T1110",
"tag_name": "tlp:white",
"description": "Adversaries may use brute force techniques to attempt access to accounts when passwords are unknown or when password hashes are obtained...",
"galaxy_id": "12345",
"source": "https://github.com/mitre/cti",
"authors": [
"MITRE"
],
"version": "1",
"distribution": "0",
"sharing_group_id": "1",
"org_id": "12345",
"orgc_id": "12345",
"default": true,
"locked": true,
"extends_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"extends_version": "1",
"published": false,
"deleted": false,
"GalaxyElement": [
{
"id": "12345",
"galaxy_cluster_id": "12345",
"key": "categories",
"value": "Military"
}
]
}
Response:
200:
{
"GalaxyCluster": {
"id": "12345",
"uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"collection_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"type": "mitre-enterprise-attack-attack-pattern",
"value": "Brute Force - T1110",
"tag_name": "tlp:white",
"description": "Adversaries may use brute force techniques to attempt access to accounts when passwords are unknown or when password hashes are obtained...",
"galaxy_id": "12345",
"source": "https://github.com/mitre/cti",
"authors": [
"MITRE"
],
"version": "1",
"distribution": "0",
"sharing_group_id": "1",
"org_id": "12345",
"orgc_id": "12345",
"default": true,
"locked": true,
"extends_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"extends_version": "1",
"published": false,
"deleted": false,
"GalaxyElement": [
{
"id": "12345",
"galaxy_cluster_id": "12345",
"key": "categories",
"value": "Military"
}
]
}
}
403:
{
"name": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"message": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"url": "/attributes"
}
404:
{
"name": "Invalid attribute",
"message": "Invalid attribute",
"url": "/attributes/1234"
}
Default:
{
"name": "string",
"message": "string",
"url": "/attributes"
}
Edit galaxy cluster
POST
https://misp.local/galaxy_clusters/add/{galaxyId}
Request:
{
"id": "12345",
"uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"collection_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"type": "mitre-enterprise-attack-attack-pattern",
"value": "Brute Force - T1110",
"tag_name": "tlp:white",
"description": "Adversaries may use brute force techniques to attempt access to accounts when passwords are unknown or when password hashes are obtained...",
"galaxy_id": "12345",
"source": "https://github.com/mitre/cti",
"authors": [
"MITRE"
],
"version": "1",
"distribution": "0",
"sharing_group_id": "1",
"org_id": "12345",
"orgc_id": "12345",
"default": true,
"locked": true,
"extends_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"extends_version": "1",
"published": false,
"deleted": false,
"GalaxyElement": [
{
"id": "12345",
"galaxy_cluster_id": "12345",
"key": "categories",
"value": "Military"
}
]
}
Response:
200:
{
"GalaxyCluster": {
"id": "12345",
"uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"collection_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"type": "mitre-enterprise-attack-attack-pattern",
"value": "Brute Force - T1110",
"tag_name": "tlp:white",
"description": "Adversaries may use brute force techniques to attempt access to accounts when passwords are unknown or when password hashes are obtained...",
"galaxy_id": "12345",
"source": "https://github.com/mitre/cti",
"authors": [
"MITRE"
],
"version": "1",
"distribution": "0",
"sharing_group_id": "1",
"org_id": "12345",
"orgc_id": "12345",
"default": true,
"locked": true,
"extends_uuid": "c99506a6-1255-4b71-afa5-7b8ba48c3b1b",
"extends_version": "1",
"published": false,
"deleted": false,
"GalaxyElement": [
{
"id": "12345",
"galaxy_cluster_id": "12345",
"key": "categories",
"value": "Military"
}
]
}
}
403:
{
"name": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"message": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"url": "/attributes"
}
404:
{
"name": "Invalid attribute",
"message": "Invalid attribute",
"url": "/attributes/1234"
}
Default:
{
"name": "string",
"message": "string",
"url": "/attributes"
}