# MISP Export: Rules & Bundles as MISP Objects and Events (Rulezet)

**URL:** <https://discourse.ossbase.org/t/misp-export-rules-bundles-as-misp-objects-and-events-rulezet/1066>\
**Category:** hackathon.lu\
**Tags:** rulezet, misp, hackathon-2026\
**Created:** [April 15, 2026, 1:24pm UTC](https://discourse.ossbase.org/t/misp-export-rules-bundles-as-misp-objects-and-events-rulezet/1066 "2026-04-15T13:24:49Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ecrou-exact](https://discourse.ossbase.org/user_avatar/discourse.ossbase.org/ecrou-exact/32/592_2.png) [@ecrou-exact](https://discourse.ossbase.org/u/ecrou-exact)\
**Post date:** [April 15, 2026, 1:24pm UTC](https://discourse.ossbase.org/t/misp-export-rules-bundles-as-misp-objects-and-events-rulezet/1066/1 "2026-04-15T13:24:49Z")

</div>

**MISP Export: Rules & Bundles as MISP Objects and Events**

Add the ability to export detection rules and bundles directly into the MISP ecosystem.

A single rule could be exported as a **MISP object** (using a dedicated `detection-rule` object template), carrying its metadata — format, author, version, tags, and the raw rule content — as structured attributes.

A **bundle** could be exported as a full **MISP event** , grouping all its rules as MISP objects within a single shareable event, ready to be pushed to any MISP instance via the MISP API.