docs: update misp & thehive docs [skip ci]

ninoseki · Jul 13, 2024 · e3d6910 · e3d6910
1 parent bd7f60f
commit e3d6910
Show file tree

Hide file tree

Showing 2 changed files with 38 additions and 0 deletions.
diff --git a/docs/emitters/hive.md b/docs/emitters/hive.md
@@ -8,6 +8,7 @@ This emitter creates an alert on TheHive. TheHive v5 is supported.
 emitter: thehive
 url: ...
 api_key: ...
+observable_tags: ...
 ```
 
 ## Components
@@ -27,3 +28,21 @@ api_key: ...
 !!! note
 
     `tags` of a rule are set as tags of an alert.
+
+    ```yaml
+    id: ...
+    title: ...
+    description: ...
+    tags: # tags for an alert
+      - foo
+    queries:
+      - analyzer: ...
+        query: ...
+    emitters:
+      - emitter: database
+      - emitter: thehive
+        url: ...
+        api_key: ...
+        observable_tags: # tags for observable(s)
+          - bar
+    ```
diff --git a/docs/emitters/misp.md b/docs/emitters/misp.md
@@ -8,6 +8,7 @@ This emitter creates an event on MISP based on an alert. MISP v2 is supported.
 emitter: misp
 url: ...
 api_key: ...
+attribute_tags: ...
 ```
 
 ## Components
@@ -27,3 +28,21 @@ api_key: ...
 !!! note
 
     `tags` of a rule are set as tags of an event.
+
+    ```yaml
+    id: ...
+    title: ...
+    description: ...
+    tags: # tags for an event
+      - foo
+    queries:
+      - analyzer: ...
+        query: ...
+    emitters:
+      - emitter: database
+      - emitter: misp
+        url: ...
+        api_key: ...
+        observable_tags: # tags for attribute(s)
+          - bar
+    ```