eCrimeLabs/ja3toMISP

Stars
10
Rank 1,807,489 (Top 36 %)
Language
Python
License
MIT License
Created almost 6 years ago
Updated over 5 years ago

eCrimeLabs/ja3toMISP

eCrimeLabs

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Extracts JA3 fingerprints from a PCAP and adds them to an event in MISP as objects

MISP-PurgeEvents

Cleanup of older MISP events can require some work until now

MISP2CbR

Utilizing your Threat data from a MISP instance into CarbonBlack Response by exposing the data in the Threat Intelligence Feed.

phish2MISP

Easy way to create a MISP event related to a Phishing page

cratos-fastapi

The CRATOS proxy API integrates with your MISP instance and allows to extract indicators that can be consumed by security components such as SIEM, DNS, Proxies, Firewalls, EDR, NDR and other that can consume a file with indicators.

vt2misp

Script to fetch data from virustotal and add it to a specific event as an object

MISP-autotagging

This script when executed searches for organisations with a specific UUID and add a dedicated local tag to the event.

securityonion-ecrimelabs

Implementation of informaiton from MISP through the eCrimeLabs API and into SecurityOnion

Presentations

Various presentations

IOC

Indicators of Compromise