Misp-modules-cli 1.0.0

MISP Project
1

misp-modules-cli 1.0.0

We are happy to announce the long-awaited first release of misp-modules-cli version 1.0.0.

This initial release makes it nifty and convenient to use MISP expansion modules directly from the command line, whether you are working against a local or remote misp-modules service. The goal is simple: bring the power of misp-modules into a lightweight CLI workflow that is easy to script, automate, and integrate into daily analysis work.

5568×1435 84.7 KB

Highlights

  • First stable release of misp-modules-cli
  • Query MISP expansion modules from the command line
  • Automatic guessing of likely MISP attribute types from raw input values
  • Support for explicit type selection when you already know the attribute type
  • Module filtering to query only selected expansion modules
  • Live introspection of supported input types
  • Per-module local configuration storage for credentials and API keys
  • Unified JSON output for easier automation and downstream processing
  • Markdown report generation for readable output and reporting
  • Local response caching to reduce API calls and improve performance

What you can do with 1.0.0

With misp-modules-cli, you can quickly query enrichment and expansion modules without leaving your terminal. This first release already provides a practical set of features for analysts and automation workflows:

  • Query a value directly and let the CLI guess the most likely MISP type
  • Force a specific MISP attribute type when needed
  • Restrict queries to one or more chosen modules
  • Discover supported module input types dynamically
  • Configure modules once and reuse credentials locally
  • Export results as raw JSON, unified JSON, or Markdown reports
  • Benefit from a built-in cache for faster repeated lookups

Why this release matters

misp-modules has long been a useful component of the MISP ecosystem, and this release makes it much more pleasant to use it outside of a web interface or custom integration. misp-modules-cli offers a straightforward and script-friendly way to access those modules directly from shell environments, making investigations and automation pipelines easier to build.

Requirements

  • Python 3.10+
  • A reachable misp-modules service
  • Python package: requests

Getting started

A few examples from this first release:

python3 bin/cli.py --list-supported-types
python3 bin/cli.py --value 8.8.8.8 --show-guesses
python3 bin/cli.py --type domain --value circl.lu
python3 bin/cli.py --type domain --value circl.lu --module circl_passivedns,dns --unified-output
python3 bin/cli.py --value 8.8.8.8 --markdown-output

Notes

This is the very first 1.0 release of the project, and it already covers the core use cases expected from a lightweight command-line client for misp-modules. It is a strong foundation for future improvements and additional quality-of-life features.

Full Changelog: Commits · MISP/misp-modules-cli · GitHub

1 Like