About this integration
Share and enrich threat intelligence events, attributes, and indicators with MISP. Connect it to any workflow without writing code.
You can choose from 1 trigger, 65 search modules and 73 actions. The connection type is basic authentication.
How to connect
The credential form asks for API Key and Base URL.
Prefer the interactive builder form? Open it on the app page.
Enter your credentials below. WEXTL stores them encrypted and uses them only to call the API on your behalf.
| Field | Type | Help |
|---|---|---|
API KeyRequired | password | — |
Base URLRequired | text | Instance origin with no trailing slash and no path, e.g. https://misp.example.com. |
Use it in workflow automation
Start with Watch Events, then add Add a Collection.
Triggers, searches and actions
Explore the fields available for each MISP trigger, search, and action — 1 trigger, 65 searchs, and 73 actions.
Triggers
Whenever something changes in the app, one of 1 available trigger can start a run immediately.
- Watch Events
Searches
65 search modules let you query the app mid-run and feed the results to the next step.
- Check If a List of Values Matches Any Warninglists
- Enable/disable Noticelist
- Enable/disable Warninglists
- Export Taxonomy.
- Fetch from All Feeds
Actions
Use 73 action modules to write data back into the app from anywhere in a run.
- Add a Collection
- Add a Feed
- Add Analyst Data
- Add an Attribute
- Add an Object to an Event
Explore the fields available for each MISP trigger, search, and action.
Triggers
| Field | Type |
|---|---|
ID | number |
Name | text |
Created at | text |
Searches
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Noticelist IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Taxonomy IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Feed IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Feed IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Value filter | text |
Type filter | text |
Tags | text |
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
Value filter | text |
Type filter | text |
Tags | text |
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
Value filter | text |
Type filter | text |
Tags | text |
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
FilterRequired | text |
Value filter | text |
Type filter | text |
Tags | text |
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
Analyst TypeRequired | text |
Analyst Data IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Attribute IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Noticelist IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Sharing Group IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Taxonomy IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Taxonomy IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event Report IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
Galaxy IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Galaxy Cluster IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Galaxy IDRequired | choice |
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Object IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Organisation IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
Setting NameRequired | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event IDRequired | choice |
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
Tag IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
ContextRequired | text |
PercentageRequired | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
User IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
User Setting IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
User IDRequired | choice |
User Setting NameRequired | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
Warninglist IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Analyst TypeRequired | text |
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
Value filter | text |
Type filter | text |
Tags | text |
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
Server IDRequired | choice |
Pull TechniqueRequired | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Server IDRequired | choice |
Push TechniqueRequired | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Value filter | text |
Type filter | text |
Tags | text |
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
Value filter | text |
Type filter | text |
Tags | text |
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
Galaxy IDRequired | choice |
Value filter | text |
Type filter | text |
Tags | text |
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
Tag Search TermRequired | text |
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
Value filter | text |
Type filter | text |
Tags | text |
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
Value filter | text |
Type filter | text |
Tags | text |
LimitRequired | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Collection IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
Actions
| Field | Type |
|---|---|
NameRequired | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
NameRequired | text |
Feed URLRequired | url |
Provider | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Analyst TypeRequired | text |
Analyst Object UUIDRequired | text |
Analyst Object TypeRequired | text |
Opinion | text |
Comment | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event IDRequired | choice |
Attribute typeRequired | text |
ValueRequired | text |
Category | text |
To IDS | boolean |
Comment | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event IDRequired | choice |
Object Template IDRequired | text |
Comment | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Sharing Group IDRequired | choice |
Organisation IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Sharing Group IDRequired | choice |
Server IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event infoRequired | text |
Distribution | number |
Threat level ID | number |
Analysis | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event IDRequired | choice |
NameRequired | text |
Content | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event IDRequired | choice |
Tag IDRequired | choice |
LocalRequired | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Galaxy IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
NameRequired | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Attribute IDRequired | choice |
Values | text |
Sighting type | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Values | text |
Sighting type | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Tag nameRequired | text |
Colour | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Attribute IDRequired | choice |
Tag IDRequired | choice |
LocalRequired | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
EmailRequired | |
Organisation | choice |
Role ID | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Attach Target IDRequired | text |
Attach Target TypeRequired | text |
LocalRequired | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Cache Feeds ScopeRequired | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Collection IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Galaxy IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Analyst TypeRequired | text |
Analyst Data IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Attribute IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Sharing Group IDRequired | choice |
Organisation IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Sharing Group Server IDRequired | choice |
Server IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Sharing Group IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Attribute IDRequired | choice |
Tag IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event Report IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event Report IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event IDRequired | choice |
Tag IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Galaxy Cluster IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Object IDRequired | choice |
Hard delete | boolean |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Organisation IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Server IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Sighting IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Tag IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
User IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
User Setting IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Feed IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Taxonomy IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Collection IDRequired | choice |
NameRequired | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Feed IDRequired | choice |
NameRequired | text |
Feed URLRequired | url |
Provider | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Analyst TypeRequired | text |
Analyst Data IDRequired | choice |
Opinion | text |
Comment | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Attribute IDRequired | choice |
Attribute typeRequired | text |
ValueRequired | text |
Category | text |
To IDS | boolean |
Comment | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Sharing Group IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event IDRequired | choice |
Event infoRequired | text |
Distribution | number |
Threat level ID | number |
Analysis | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event Report IDRequired | choice |
NameRequired | text |
Content | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Galaxy Cluster IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Organisation IDRequired | choice |
NameRequired | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Server IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Tag IDRequired | choice |
Tag nameRequired | text |
Colour | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
User IDRequired | choice |
EmailRequired | |
Organisation | choice |
Role ID | number |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Feed IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Taxonomy IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Attribute IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Galaxy IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event IDRequired | choice |
Report URLRequired | url |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
URLRequired | text |
MethodRequired | choice |
Headers | array |
Header | object |
Query String | array |
Parameter | object |
Body | text |
| Field | Type |
|---|---|
Body | text |
Headers | text |
Status code | number |
| Field | Type |
|---|---|
Event IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Galaxy Cluster IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Attribute IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event Report IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Galaxy Cluster IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
User IDRequired | choice |
User Setting NameRequired | text |
Setting valueRequired | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Event IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
Galaxy Cluster IDRequired | choice |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |
| Field | Type |
|---|---|
ID | text |
Name | text |
Created at | text |