How to search for multiple attributes with MISPv3 integration

TommyJohansson — Mon, 19 May 2025 14:14:18 GMT

We have not been able to search for multiples values in the XSOAR MISPv3 integration with the command:

 !misp-search-attributes

I got some tips from the community but it does not seem to work either

!misp-search-attributes value=`${list.['8.8.8.8', '4.4.4.4']}`

This integration is using pymisp i think, and it should be possible to pass an array with IPs instead of just one IP.

Re: How to search for multiple attributes with MISPv3 integration

mbgonzalez — Thu, 05 Jun 2025 19:15:17 GMT

I do this by importing the list to a context key with Set first, and then search the attributes with the same command: !misp-search-attributes value=${my-imported-list}. XSOAR executes the same command to all the items in the context-key

topic How to search for multiple attributes with MISPv3 integration in Cortex XSOAR Discussions

How to search for multiple attributes with MISPv3 integration

Re: How to search for multiple attributes with MISPv3 integration