Exam CIS-SIR topic 1 question 118 discussion

Key features Support manual and automatic observable enrichment. Results include the MISP attribute and event information that is associated with the observables. Attribute enrichment in MISP which includes adding or updating tags, galaxies, or comments. Event creation in MISP from SIR: Supports manual and the automatic creation of events in MISP from SIR. Update a MISP event from SIR which includes adding or updating tags, galaxies, or attributes. Add security incident associated observables as attributes to a MISP event. Auto-extract MITRE-ATT&CK™ information from MISP attributes and associate the information to SIR security incidents. Automatically add SIR MITRE-ATT&CK™ information as galaxies to a MISP event.