MISP Export: Rules & Bundles as MISP Objects and Events
Add the ability to export detection rules and bundles directly into the MISP ecosystem.
A single rule could be exported as a MISP object (using a dedicated detection-rule object template), carrying its metadata — format, author, version, tags, and the raw rule content — as structured attributes.
A bundle could be exported as a full MISP event, grouping all its rules as MISP objects within a single shareable event, ready to be pushed to any MISP instance via the MISP API.