Taxonomy
Get taxonomies:
GET
https://misp.local/taxonomies
Response:
200:
[
{
"Taxonomy": {
"id": "12345",
"namespace": "tlp",
"description": "Disclosure is not limited. Sources may use TLP:WHITE when information carries minimal or no foreseeable risk of misuse, in accordance with applicable rules and procedures for public release. Subject to standard copyright rules, TLP:WHITE information may be distributed without restriction.",
"version": "5",
"enabled": true,
"exclusive": true,
"required": true
},
"total_count": 0,
"current_count": 0
}
]
403:
{
"name": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"message": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"url": "/attributes"
}
404:
{
"name": "Invalid attribute",
"message": "Invalid attribute",
"url": "/attributes/1234"
}
Default:
{
"name": "string",
"message": "string",
"url": "/attributes"
}
Get a taxonomy by ID:
GET
https://misp.local/taxonomies/view/{taxonomyIdParameter}
Response:
200:
{
"Taxonomy": {
"id": "12345",
"namespace": "tlp",
"description": "Disclosure is not limited. Sources may use TLP:WHITE when information carries minimal or no foreseeable risk of misuse, in accordance with applicable rules and procedures for public release. Subject to standard copyright rules, TLP:WHITE information may be distributed without restriction.",
"version": "5",
"enabled": true,
"exclusive": true,
"required": true
},
"entries": [
{
"tag": "tlp:white",
"expanded": "string",
"description": "string",
"exclusive_predicate": true,
"existing_tag": true
}
]
}
403:
{
"name": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"message": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"url": "/attributes"
}
404:
{
"name": "Invalid attribute",
"message": "Invalid attribute",
"url": "/attributes/1234"
}
Default:
{
"name": "string",
"message": "string",
"url": "/attributes"
}
Enable taxonomy:
POST
https://misp.local/taxonomies/enable/{taxonomyIdParameter}
Response:
200:
{
"saved": true,
"success": true,
"name": "Taxonomy enabled",
"message": "Taxonomy enabled",
"url": "/taxonomies/enable/1234"
}
403:
{
"name": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"message": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"url": "/attributes"
}
404:
{
"name": "Invalid attribute",
"message": "Invalid attribute",
"url": "/attributes/1234"
}
Default:
{
"name": "string",
"message": "string",
"url": "/attributes"
}
Disable taxonomy:
POST
https://misp.local/taxonomies/disable/{taxonomyIdParameter}
Response:
200:
{
"saved": true,
"success": true,
"name": "Taxonomy disabled",
"message": "Taxonomy disabled",
"url": "/taxonomies/disabled/1234"
}
403:
{
"name": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"message": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"url": "/attributes"
}
404:
{
"name": "Invalid attribute",
"message": "Invalid attribute",
"url": "/attributes/1234"
}
Default:
{
"name": "string",
"message": "string",
"url": "/attributes"
}
Update taxonomies:
POST
https://misp.local/taxonomies/update
Response:
200:
{
"saved": true,
"success": true,
"name": "Successfully updated 120 taxonomy libraries.",
"message": "Successfully updated 120 taxonomy libraries.",
"url": "/taxonomies/update"
}
403:
{
"name": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"message": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"url": "/attributes"
}
404:
{
"name": "Invalid attribute",
"message": "Invalid attribute",
"url": "/attributes/1234"
}
Default:
{
"name": "string",
"message": "string",
"url": "/attributes"
}
Get a taxonomy extended with tags used in events and attributes:
GET
https://misp.local/taxonomies/taxonomy_tags/{taxonomyIdParameter}
Response:
200:
{
"Taxonomy": {
"id": "12345",
"namespace": "tlp",
"description": "Disclosure is not limited. Sources may use TLP:WHITE when information carries minimal or no foreseeable risk of misuse, in accordance with applicable rules and procedures for public release. Subject to standard copyright rules, TLP:WHITE information may be distributed without restriction.",
"version": "5",
"enabled": true,
"exclusive": true,
"required": true
},
"entries": [
{
"org_id": "12345",
"server_id": "12345",
"email": "[email protected]",
"autoalert": true,
"authkey": "894c8d095180c7ea28789092e96ca6424199aa4f",
"invited_by": "12345",
"gpgkey": "string",
"certif_public": "string",
"nids_sid": "4000000",
"termsaccepted": true,
"newsread": "1617875568",
"role_id": "3",
"change_pw": "0",
"contactalert": true,
"disabled": true,
"expiration": "2019-08-24T14:15:22Z",
"current_login": "1617875568",
"last_login": "1617875568",
"force_logout": true,
"date_created": "1617875568",
"date_modified": "1617875568",
"events": 0,
"attributes": 0
}
]
}
403:
{
"name": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"message": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"url": "/attributes"
}
404:
{
"name": "Invalid attribute",
"message": "Invalid attribute",
"url": "/attributes/1234"
}
Default:
{
"name": "string",
"message": "string",
"url": "/attributes"
}
Export taxonomy:
GET
https://misp.local/taxonomies/export/{taxonomyIdParameter}
Response:
200:
{
"namespace": "tlp",
"description": "Disclosure is not limited. Sources may use TLP:WHITE when information carries minimal or no foreseeable risk of misuse, in accordance with applicable rules and procedures for public release. Subject to standard copyright rules, TLP:WHITE information may be distributed without restriction.",
"version": 0,
"exclusive": true,
"predicates": [
{
"value": "white",
"expanded": "(TLP:WHITE) Information can be shared publicly in accordance with the law."
}
],
"values": [
{
"predicate": "white",
"entry": [
{
"value": "spam",
"expanded": "spam",
"description": "Spam or ‘unsolicited bulk e-mail’, meaning that the recipient has not granted verifiable permission for the message to be sent and that the message is sent as part of a larger collection of messages, all having identical content."
}
]
}
]
}
403:
{
"name": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"message": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
"url": "/attributes"
}
404:
{
"name": "Invalid attribute",
"message": "Invalid attribute",
"url": "/attributes/1234"
}
Default:
{
"name": "string",
"message": "string",
"url": "/attributes"
}