MISP / MISP/PyMISP

Tags returned when searching attributes

Open
#1,302 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
491
Forks
290
Avg merge
2d 8h
Merged PRs (30d)
3

Description

When searching attributes using search(controller='attributes', ...) it would be a valuable addition to have the option to filter which tags are included in the response. For example, do we want to have both global and local tags included, or only local tags.

In both cases, it might also prove beneficial to have the option to filter tags within each category to reduce the size of the response, e.g., say only local tags are requested, then include only the tag foo in the response.

One could also argue that in some scenarios, a less verbose version of the tags would be meaningful, e.g., include only specific details of each tag, such as its name.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start at the Python search(controller='attributes', ...) entry point and trace how attribute responses assemble global and local tags. Define the filtering options and response detail level from the requested use cases; done means callers can select tag categories, filter tags within them, and request less verbose tag details, with coverage for each option.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
api
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.