MISP
Threat intelligence sharing platform
A platform designed to facilitate the structured sharing of cyber security indicators and threats among analysts and security professionals.
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
5k stars
279 watching
1k forks
Language: PHP
last commit: 5 days ago
Linked from 2 awesome lists
cticybersecurityfraud-detectionfraud-managementfraud-preventioninformation-exchangeinformation-securityinformation-sharingintelligencemalware-analysismispsecuritystixthreat-analysisthreat-huntingthreat-intelthreat-intelligencethreat-intelligence-platformthreat-sharingthreatintel
rshipp/awesome-malware-analysis
inquest/awesome-yaraRelated projects:
| Repository | Description | Stars |
|---|---|---|
| misp/misp-galaxy | A platform to integrate and share threat intelligence clusters and vocabularies with MISP threat intelligence platform | 531 |
| misp/misp-modules | Provides an API and extension mechanism for MISP threat intelligence platforms. | 345 |
 thehive-project/thehive | A scalable platform for investigating and managing security incidents, providing features for collaboration, task assignment, and case management. | 3,446 |
| misp/misp-training | Training materials and source code for threat intelligence, information sharing, and MISP software development. | 389 |
| misp/misp-maltego | An integration tool for Maltego to leverage MISP threat intelligence and the MITRE ATT&CK dataset | 170 |
| misp/misp-training-lea | A training program focused on practical information sharing between law enforcement and CSIRT communities using the MISP platform. | 31 |
| misp/misp-workbench | Toolset for analyzing and correlating threat intelligence data from various sources. | 28 |
| misp/misp-rfc | Defines and maintains standards for information exchange in threat intelligence platforms | 46 |
 juju4/ansible-misp | Provides a set of Ansible roles and tools to install, configure and test the MISP Malware Information Sharing Platform & Threat Sharing system | 52 |
 davidonzo/threat-intel | Develops and shares cyber threat intelligence information in various formats for SOC/CSIRT/CERT use. | 148 |
| misp/pymisp | A Python library to access and manipulate data from MISP platforms via their REST API | 445 |
| misp/misp-taxonomies | A Python application that provides a standardized set of classification libraries to tag, classify, and organize security-related information. | 264 |
 opennhp/opennhp | A Zero Trust networking protocol to hide servers and data from attackers by utilizing cryptography at the OSI 5th layer. | 13,513 |
| misp/misp-taxii-server | A tool that integrates with MISP to enable secure information exchange through the Taxii protocol. | 80 |
| misp/misp-warninglists | Provides lists of known indicators to inform users about potential false positives or other information in threat intelligence data | 532 |