Discover MISP/MISP-presentations Open Source project

Clusters and elements to attach to MISP events or attributes (like threat actors)

4,717

misp-galaxy

Warning lists to inform users of MISP about potential false-positives or other information in indicators

439

misp-warninglists

Python library using the MISP Rest API

412

PyMISP

Modules for expansion services, enrichment, import and export in MISP and other tools.

381

misp-modules

MISP trainings, threat intel and information sharing training materials with source code

344

misp-training

TeX

316

x_old_misp_docker

MISP Docker (XME edition)

misp-book

misp-taxonomies

Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.

A live dashboard for a real-time overview of threat intelligence from MISP instances

237

misp-dashboard

Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.

184

MISP-maltego

A production ready Dockered MISP

156

misp-docker

Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing

156

docker-misp

Dockerfile

100

misp-objects

Definition, description and relationship types of MISP objects

An OpenTAXII Configuration for MISP

MISP-Taxii-Server

Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.

mail_to_misp

A utility repo to assist with converting between MISP and STIX formats

MISP-STIX-Converter

misp-cloud - Cloud-ready images of MISP

misp-cloud

MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats

misp-stix

Best practices in threat intelligence

best-practices-in-threat-intelligence

Specifications used in the MISP project including MISP core format

misp-playbooks

MISP Playbooks

Jupyter Notebook

misp-rfc

Deploy MISP Project software with Vagrant.

misp-vagrant

A simple ReST server to lookup threat actors (by name, synonym or UUID) and returning the corresponding MISP galaxy information about the known threat actors.

threat-actor-intelligence-server

intelligence-icons is a collection of icons and diagrams for building training and marketing materials around Intelligence sharing; including but not limited to CTI, MISP Threat Sharing, STIX 2.

intelligence-icons

Legal, procedural and policies document templates for operating MISP and information sharing communities

misp-compliance

misp-packer

Build Automated Machine Images for MISP

Maltego Transform to put entities into MISP events

MISPego

Practical Information Sharing between Law Enforcement and CSIRT communities using MISP

misp-training-lea

TeX

PyTaxonomies

Python module to use the MISP Taxonomies

misp-workbench

MISP Workbench

Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists

PyMISPWarningLists

Lua plugin to extract data from Wireshark and convert it into MISP format

misp-wireshark

Lua

ansible

MISP - Ansible installation script

MISP website (hugo-based)

misp-website

A curses-style interface for automatic takedown notification based on MISP events.

misp-takedown

A tool to convert MISP XML files (events and attributes) into graphs

misp-graph

Pythonic way to work with the galaxies defined there: https://github.com/MISP/misp-galaxy

PyMISPGalaxies

A real-time Grafana dashboard using MISP ZeroMQ message queue and InfluxDB

misp-grafana

A privacy-aware exchange module to securely and privately share your indicators

misp-privacy-aware-exchange

MISP sighting server is a fast sighting server to store and look-up sightings on attributes (network indicators, file hashes, system indicators) in a space efficient way.

misp-sighting-server

Scripts to process big chunks of data from MISP and do in depth correlations on samples.

data-processing

Export MISP attributes in Yara

yara-misp

Library of blueprints usable in MISP Workflows

misp-workflow-blueprints

Sizing your MISP instance

MISP-sizer

Common Exercise Format - CEXF

cexf

misp-guard is a mitmproxy addon that inspects and blocks outgoing events to external MISP instances via sync mechanisms (pull/push) based on a set of customizable block rules.

misp-guard

Simple and secure synchronisation of MISP instances with mobile phones

misp-bump

Java

evtx-toolkit

Tool to read EVTX files including SYSMON and convert to JSON, MISP Objects and Graph stream

misp-decaying-models

MISP decaying models

A browser for the threat intelligence knowledge base of the MISP project galaxies

threat-intelligence-browser

Notice lists to inform users of MISP about legal or technical implication for some attributes, categories and objects

misp-noticelist

dockerized_training_environment

A training environment, with docker.

Tool to submit / delete data from MISP to opendata portal

misp-opendata

misp-standard.org website

MISP-RPM

RPM packages for MISP

Makefile

misp-standard.org

Python API for PyIntel471

PyIntel471

A tool to create bloom filters from MISP records to share IOCs with others without breaking confidentiality.

misp-bloomfilter

Very basic MISP bot for matrix.

matrix-misp-bot

MISP expansion - a browser extension (Firefox and Chrome) to lookup on MISP

misp-expansion

MISP darwin is a model and tools to automatically translate in natural language technical or structured information from MISP

misp-darwin

Test emails for mail to misp

mail_to_misp_test

LuaMISP

Lua Library to create and manipulate MISP entities

Lua

pdf_fonts

PDF Fonts used by PyMISP PDFtools export to support internalization

misp-usage-statistics

MISP usage statistics using bokeh (as a static webpage)

Tools to support sighting from various sources (e.g. network pcap) to sight attributes in MISP instances

misp-sighting-tools

Tools and documentation related to MISP instance monitoring in production/corporate environments

misp-monitoring

Python Privacy Aware (pypraware) module containing script for misp-privacy-aware-exchange

pypraware

STIX files for testing misp-stix and various libraries

misp-stix-tests

misp_dockerized_testing

Test MISP instances using a dockerized infrastructure

widget-collection

CakePHP (v2.x branch + updates)

cakephp

Python API to create and update MISP Object templates

PyMISPObjectTemplates