Skip to content

[Bug] ERROR SENDIND DATA TO MISP WITH CORTEX ANALYZER AND THEHIVE #1316

@b4lh4ck

Description

@b4lh4ck

Describe the bug
I got an error sometimes with MISP analyzer with the new version of it v2.5.5 and I can't send cases to MISP with Thehive

To Reproduce
Steps to reproduce the behavior:

  1. enable MISP analyzer and have an instance with MISP v2.5.5
  2. analize one IOC (IP, URL, etc)
  3. get the result of analysis

Expected behavior
I expect a good result of trying to view if exist events in MISP instance, not sometimes works properly and sometimes not

Work environment

  • Client OS: Linux RHEL 8.10
  • Browse type and version: Google Chrome
  • Cortex version: 3.1
  • Thehive 4
  • Cortex Analyzer/Responder name: MISP
  • Cortex Analyzer/Responder version: 2.1

Additional context

HI everyone I have a problem trying to integrate thehive and cortex with MISP in the new version of MISP v2.5.5

I have Thehive 4 and Cortex 3.1

When I integrated Cortex with MISP and try to analyze one IP sometimes I got an error and sometimes works properly

Image

Image

Image

with thehive I can't send or import a case to MISP I got the following error

Image

Image

Im using a self sign certificate with MISP but Im using the code to use the certificate in thehive

Image

I tried installing the version 2.5.4 of pymisp but I got errors when I installing it or something went wrong

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions