unattributed indicator events import

[Qlts]

While importing events to misp with -i flag, events per malware family are created and updated. However, in Crowdstrike feed there are a lot of indicators with no malware family attribution. These indicators are not imported to misp. From configuration side (misp_import.ini) everything seems OK. Am i missing something? How to get also events that don't have malware family mapped?

[rubentroncon]

Same issue.

Can you import the adversary information (-a flag)? The import fails if I include that, and I wondered if this might be the reason the attributes are not added.

[Qlts]

For me adversary import (-a flag) works. Issue is with indicators that dont have adversary/malware family mapping. These are not imported.