Event distribution groups / MISP 2.4 roadmap feature "sharing groups"

[Heiko Siebel]

Dear all,

When adding and publishing a new event in MISP 2.3.1.x there are currently four distribution options (detailed description in documentation chapter "Using the system" > "Creating an event", https://github.com/MISP/MISP/blob/master/INSTALL/documentation.pdf):

• Your organisation only
  
• This community only
  
• Connected communities
• All communities

Given the case that there is an event that may be only shareable to a dedicated organisation or a selected group of organisations within the MISP instance community it is difficult to represent that requirement.

On the MISP roadmap (http://www.misp-project.org/#roadmap) for version 2.4 I recognized the feature "Sharing groups or 'Releasable to' model". Would this feature allow me to release certain events only to a subset of organisations of my MISP instance community?

Cheers,

Heiko

[Andras Iklody]

Dear Heiko,

that is indeed what will be possible in 2.4! You will still have the current 4 options and an additional 5th one, where you can additionally assigned a pre-defined sharing group, which can contain a list of organisations and instances that will have access to the event. You will also be able to delegate the further modifications to a sharing group to other organisations, if you wish to do so. Users with a new role permission will be able to create the sharing groups.

Best regards,

Andras

--
You received this message because you are subscribed to the Google Groups "MISP development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to misp-devel+...@googlegroups.com.
To post to this group, send email to misp-...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/misp-devel/bda3a5bb-b42d-4027-b5e4-c2143e6de49f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Heiko Siebel]

Dear Andras,

Thank you very much, that is good news!

If I get it right, it would be possible to assign one sharing group per event and not multiple sharing groups? Multiple sharing groups would be easier for us, but a single sharing group would also meet our demands. As needed we could create a new sharing group if a non-existent subset of MISP organisations is required.

Best regards,

Heiko

[Andras Iklody]

Dear Heiko,

indeed, 1 sharing group per event / attribute is the limitation of the new system. 

Best regards,

Andras

--

You received this message because you are subscribed to the Google Groups "MISP development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to misp-devel+...@googlegroups.com.
To post to this group, send email to misp-...@googlegroups.com.

To view this discussion on the web, visit https://groups.google.com/d/msgid/misp-devel/d80939d3-9e90-4c77-88f6-70a433dcdd10%40googlegroups.com.