MISP / MISP

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Home Page:https://www.misp-project.org/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Feature Request: Option to select more than one sharing group when sharing the event

linozinho opened this issue · comments

Is your feature request related to a problem? Please describe.

The problem with sharing to more than one sharing group at the same time

Describe the solution you'd like

It would be cool if there were checkboxes on the sharing groups so we could choose which ones we want to select to share the event

Describe alternatives you've considered

image

Additional context

No response

Code of Conduct

  • I agree to follow this project's Code of Conduct

Whilst this is not possible (and we don't plan on adding this option for complexity / performance reasons) - there is a way around it using the sharing group blueprints.

You can create a reusable sharing group that inherits all the organisations of a set of sharing groups.

image

A quick example of such a rule based sharing group blueprint. It will generate a sharing group with all organisations matching the criteria (so in this case, org_nationality = international + any org being part of sharing group 4, 5, 6 or 7).

The sharing group can be kept up to date with a single API/CLI call, which can be cron jobbed to be kept up to date continuously.

Thank you for your help

No worries!