Open
Description
Hello. when converting an MISPEvent to STIX when it finds ip-src
or ip-dst
it doesn't put the attribute category="ipv4-addr"
, so when the SIEM QRadar tries to obtain IP STIX Events it doesn't understand it so it skips these type of events. When i manually add the category
it can understand them and consumes them.
thank you.
Metadata
Metadata
Assignees
Labels
No labels