@MISPProject

MISP - Threat Sharing. An open source software and standards to share, create and validate threatintel and intelligence. Mastodon @misp@misp-community.org

 Worldwide
github.com/MISP/MISP
Joined March 2016
  • Tweets5K
  • Following93
  • Followers22.3K
590Media
🚀 Kunai pushes further @MISPProject integration! New tool kunai-to-misp (github.com/kunai-project/pyk…) lets you push Kunai logs to MISP (misp-project.org) for better threat intel sharing. #ThreatIntel #Linux #SOC #OpenSource #ThreatHunting
7
13
1,322
Further enhance phishing investigations with @MISPProject playbooks! 'URL Remediation' streamlines finding abuse contacts via AbuseFinder, @lookyloo_app , @FIRSTdotOrg , and RDAP, while reporting malicious sites to MSRC, Google Safe Browsing and Netcraft. github.com/MISP/misp-playboo…
10
53
3,751
You can now browse the @MISPProject playbooks on GitHub Pages: misp.github.io/misp-playbook… . The playbooks are automatically converted into easy-to-navigate HTML pages. Dive in and explore!
32
101
6,414
It’s been a while since I posted a new @MISPProject tip, but in the meantime you can now also enjoy the tips via a simple HTML page at cudeso.github.io/misp-tip-of…

MISP Tip of the Week

A collection of tips for using MISP.

cudeso.github.io
2
16
1,357
The @MISPProject workflow module(in 2.4-dev) now also supports ad-hoc or triggerless workflows! github.com/MISP/MISP/commit/…

new: [workflow:adhoc] Added Ad-Hoc Workflow functionality · MISP/MISP@3550671

- Allows the creation of triggerless workflows to be run manually or to be scheduled - Allow running workflows from other workflows through the new `run_workflow` module Thanks to hack.lu attendee...

github.com
1
2
3
880
New features in vulnerability lookup includes sighting from different sources including @MISPProject communities. The example below is a vulnerability in Android but the CVE is not yet published. You can track the sighting evolution. vulnerability.circl.lu/vuln/… #vulnerability #cve
10
10
3,345
Hello #MISP 2.5! 👋
5
10
1,740
New conversion scripts bridge @MISPProject playbooks and CACAO (@OASISopen) security playbooks. Still an initial version but significantly simplifies integration between both formats. #CTI #automation #soar github.com/MISP/misp-playboo…
3
8
1,037
Very nice! Visualisations are essential for understanding complex reports. Also see some ways on how to possibly integrate this in the future with @MISPProject reports and/or playbooks.
Thomas Roccia 🤘
@fr0gger_18 Sep 2024
🤓 Do you remember my work last year on Threat Report summarization and Mindmap creation with GenAI? This time, I’ve taken it a step further with a dynamic diagram which is auto-populated and enriched with threat data! 🪄 The example below is based on the latest Microsoft threat report on Citrine Sleet! 👇 #infosec #threatintel #genai
1
5
1,307
Some of the snippets of the CTF data and attachments imported into @MISPProject
1
1
3
752
Obviously, it will also include some @MISPProject tips&tricks.
2
13
864
I created a small script to extract unique hostnames and domains from the DDoSia configuration objects shared via @MISPProject . Post at vanimpe.eu/2024/10/08/extrac… ; script: github.com/cudeso/tools/blob… #DDOS
1
14
34
4,335
Replying to @Gi7w0rm @xme @MISPProject
Contact @circl_lu for getting access to the MISPPRIV instance - misp-project.org/communities…

MISP Communities and MISP Feeds

MISP Threat Intelligence & Sharing

misp-project.org
3
9
1,018
MISP 2.4.197 released with many bugs fixed, a security fix and improvements. misp-project.org/2024/09/02/… Don't forget to update! #misp #opensource #threatintel #threatintelligence #infosec

MISP 2.4.197 released with many bugs fixed, a security fix and …

MISP Threat Intelligence & Sharing

misp-project.org
1
8
21
3,376
A basic @MISPProject playbook to geolocate activity by mapping ip-src & ip-dst attributes, fetching WHOIS data, and calculating distances between IPs. Results are compiled in a MISP report and shared to Mattermost. github.com/MISP/misp-playboo… #geoint #cti #automation #playbooks
1
13
45
3,642
There's a new @MISPProject playbook waiting for you! Search in @TimesketchProj for MISP indicators. Plot the results in a graph, create a saved search in Timesketch, report sightings in MISP, and send a summary to Mattermost. #cti #automation #playbooks github.com/MISP/misp-playboo…
1
12
1
30
2,579
MISP: Open-source threat intelligence and sharing platform - helpnetsecurity.com/2024/08/… - @MISPProject #ThreatIntel #ThreatIntelligence #misp #GitHub #software #OpenSource @GitHub #CyberSecurity #netsec #security #InfoSecurity #CISO #ITsecurity #CyberSecurityNews #SecurityNews
1
1
1,004
It's time to welcome @MISPProject to Scotland (on the h 😉)
1
2
9
1,396
After MISP2Sentinel already allowed you to share indicators from MISP with Microsoft Sentinel, you can now use a @MISPProject playbook to create MISP events from Sentinel incidents, complete with entity-based indicators. @MsftSecIntel #cti #automation github.com/MISP/misp-playboo…
16
50
4,616
Tap into a vast repository of shared intelligence from #MISP with #Maltego integrations. Empower your team with real-time data to understand threats quickly and accurately. Learn more in our blog: maltego.com/blog/exploring-a…
1
7
959
Load more