Enrichment of Events and Attributes

[DeveloperNamedMax]

According to the MISP OpenAPI specification, there is an endpoint (POST /attributes/enrich/{attribute_id}) and (POST /events/enrichEvent/{eventId) for enriching events and attributes. However, I've been unable to find a corresponding higher-level function in PyMISP for this endpoint.

• Is there an existing method for enriching events/attributes that I might be missing?

Currently using:

PyMISP’s direct_call():

mispdirect_call(f'/attributes/enrich/{attribute_id}', data=enrichment_modules)
mispdirect_call(f'/events/enrichEvent/{event_id}', data=enrichment_modules)

Requests directly:

response = requests.post(
    f'{misp_root_url}/attributes/enrich/{attribute_id}',
    json=enrichment_modules,
    verify=True,
    headers=headers
)

response = requests.post(
    f'{misp_root_url}/events/enrichEvent/{event_id}',
    json=enrichment_modules,
    verify=True,
    headers=headers
)

[Rafiot]

It's missing in PyMISP, I'll add it asap (unless you do it first, I'm happily merging PRs).

[Rafiot]

I'll test it a bit more, but looks like it's going t be in the next release :)