Discover MISP/misp-privacy-aware-exchange Open Source project

Clusters and elements to attach to MISP events or attributes (like threat actors)

4,717

misp-galaxy

Warning lists to inform users of MISP about potential false-positives or other information in indicators

439

misp-warninglists

Python library using the MISP Rest API

412

PyMISP

MISP trainings, threat intel and information sharing training materials with source code

381

misp-training

TeX

316

misp-modules

Modules for expansion services, enrichment, import and export in MISP and other tools.

MISP Docker (XME edition)

302

x_old_misp_docker

misp-book

misp-taxonomies

Taxonomies used in MISP taxonomy system and can be used by other information sharing tool.

A live dashboard for a real-time overview of threat intelligence from MISP instances

237

misp-dashboard

Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.

184

MISP-maltego

Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing

156

docker-misp

Dockerfile

100

misp-objects

Definition, description and relationship types of MISP objects

A production ready Dockered MISP

misp-docker

An OpenTAXII Configuration for MISP

MISP-Taxii-Server

Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.

mail_to_misp

misp-cloud - Cloud-ready images of MISP

misp-cloud

A utility repo to assist with converting between MISP and STIX formats

MISP-STIX-Converter

Best practices in threat intelligence

best-practices-in-threat-intelligence

MISP-STIX-Converter - Python library to handle the conversion between MISP and STIX formats

misp-stix

Specifications used in the MISP project including MISP core format

misp-playbooks

MISP Playbooks

Jupyter Notebook

misp-rfc

Deploy MISP Project software with Vagrant.

misp-vagrant

A simple ReST server to lookup threat actors (by name, synonym or UUID) and returning the corresponding MISP galaxy information about the known threat actors.

threat-actor-intelligence-server

intelligence-icons is a collection of icons and diagrams for building training and marketing materials around Intelligence sharing; including but not limited to CTI, MISP Threat Sharing, STIX 2.

intelligence-icons

Legal, procedural and policies document templates for operating MISP and information sharing communities

misp-compliance

misp-packer

Build Automated Machine Images for MISP

Maltego Transform to put entities into MISP events

MISPego

Python module to use the MISP Taxonomies

PyTaxonomies

Practical Information Sharing between Law Enforcement and CSIRT communities using MISP

misp-training-lea

TeX

misp-workbench

MISP Workbench

Pythonic way to work with the warning lists defined there: https://github.com/MISP/misp-warninglists

PyMISPWarningLists

Lua plugin to extract data from Wireshark and convert it into MISP format

misp-wireshark

Lua

ansible

MISP - Ansible installation script

MISP website (hugo-based)

misp-website

A tool to convert MISP XML files (events and attributes) into graphs

misp-graph

A curses-style interface for automatic takedown notification based on MISP events.

misp-takedown

Pythonic way to work with the galaxies defined there: https://github.com/MISP/misp-galaxy

PyMISPGalaxies

A real-time Grafana dashboard using MISP ZeroMQ message queue and InfluxDB

misp-grafana

MISP sighting server is a fast sighting server to store and look-up sightings on attributes (network indicators, file hashes, system indicators) in a space efficient way.

misp-sighting-server

Scripts to process big chunks of data from MISP and do in depth correlations on samples.

data-processing

Export MISP attributes in Yara

yara-misp

Library of blueprints usable in MISP Workflows

misp-workflow-blueprints

Sizing your MISP instance

MISP-sizer

Common Exercise Format - CEXF

cexf

misp-guard is a mitmproxy addon that inspects and blocks outgoing events to external MISP instances via sync mechanisms (pull/push) based on a set of customizable block rules.

misp-guard

Simple and secure synchronisation of MISP instances with mobile phones

misp-bump

Java

evtx-toolkit

Tool to read EVTX files including SYSMON and convert to JSON, MISP Objects and Graph stream

misp-decaying-models

MISP decaying models

A browser for the threat intelligence knowledge base of the MISP project galaxies

threat-intelligence-browser

Notice lists to inform users of MISP about legal or technical implication for some attributes, categories and objects

MISP-presentations

misp-noticelist

dockerized_training_environment

A training environment, with docker.

Python API for PyIntel471

PyIntel471

misp-standard.org website

misp-standard.org

Tool to submit / delete data from MISP to opendata portal

misp-opendata

Very basic MISP bot for matrix.

matrix-misp-bot

A tool to create bloom filters from MISP records to share IOCs with others without breaking confidentiality.

misp-bloomfilter

MISP expansion - a browser extension (Firefox and Chrome) to lookup on MISP

misp-expansion

MISP darwin is a model and tools to automatically translate in natural language technical or structured information from MISP

misp-darwin

Test emails for mail to misp

MISP-RPM

RPM packages for MISP

Makefile

mail_to_misp_test

LuaMISP

Lua Library to create and manipulate MISP entities

Lua

pdf_fonts

PDF Fonts used by PyMISP PDFtools export to support internalization

misp-usage-statistics

MISP usage statistics using bokeh (as a static webpage)

Tools to support sighting from various sources (e.g. network pcap) to sight attributes in MISP instances

misp-sighting-tools

Tools and documentation related to MISP instance monitoring in production/corporate environments

misp-monitoring

Python Privacy Aware (pypraware) module containing script for misp-privacy-aware-exchange

pypraware

STIX files for testing misp-stix and various libraries

misp-stix-tests

misp_dockerized_testing

Test MISP instances using a dockerized infrastructure

widget-collection

Python API to create and update MISP Object templates

PyMISPObjectTemplates

CakePHP (v2.x branch + updates)

cakephp