MISP (@[email protected])

MISP - Threat Sharing. An open source software and standards to share, create and validate threatintel and intelligence.
Mastodon @[email protected]

[MISP (@[email protected]) @MISPProject]

MISP 2.4.197 released with many bugs fixed, a security fix and improvements.

https://t.co/2DQYyzmjUE

Don't forget to update!

#misp #opensource #threatintel #threatintelligence #infosec

[MISP (@[email protected]) @MISPProject]

The MISP project maintains and offers a comprehensive knowledge base covering threat actors, ransomware groups, malware, and more.

Even if you don't use MISP, you can now easily search across all MISP Project knowledge bases...

https://t.co/zyVbT1QB57

#threatintel

[Kunai Project (@[email protected]) @kunai_project]

🚀 Kunai pushes further @MISPProject integration!

New tool kunai-to-misp (https://t.co/EYBK3WJiQ8) lets you push Kunai logs to MISP (https://t.co/2okB2GkELz) for better threat intel sharing.

#ThreatIntel #Linux #SOC #OpenSource #ThreatHunting

[MISP (@[email protected]) @MISPProject]

MISP v2.5.3 and v2.4.201 released with numerous enhancements, bug fixes, and security improvements to strengthen threat information sharing capabilities.

#cti #opensource #threatintelligence #misp #threatintel

https://t.co/cdHcuLyc0z

[Koen Van Impe ☕ @cudeso]

Further enhance phishing investigations with @MISPProject playbooks! 'URL Remediation' streamlines finding abuse contacts via AbuseFinder, @lookyloo_app , @FIRSTdotOrg , and RDAP, while reporting malicious sites to MSRC, Google Safe Browsing and Netcraft. https://t.co/MvPKpI524Z

[Koen Van Impe ☕ @cudeso]

You can now browse the @MISPProject playbooks on GitHub Pages: https://t.co/obzSeOiM2i . The playbooks are automatically converted into easy-to-navigate HTML pages. Dive in and explore!

[Koen Van Impe ☕ @cudeso]

It’s been a while since I posted a new @MISPProject tip, but in the meantime you can now also enjoy the tips via a simple HTML page at https://t.co/n0PjoA525I

[MISP (@[email protected]) @MISPProject]

SkillAegis version 1.2.0 released

SkillAegis is a platform to design, run, and monitor exercise scenarios, enhancing skills in applications like MISP.

https://t.co/NVveh97hRh

#threatintel #training #cybersecurity #opensource

[MISP (@[email protected]) @MISPProject]

MISP 2.4.200 and 2.5.2 released - Post https://t.co/zqk97AAaLz release with many new features.

New feature such as Ad-Hoc Workflows, Private Custom Galaxies, Tags on Event Report, new features in event report & improved PDF export.

https://t.co/F9klUMJZSz

#ThreatIntel #cti

[MISP (@[email protected]) @MISPProject]

@cudeso It's now officially released in MISP 2.5.2 and 2.4.200

https://t.co/F9klUMJZSz

[Koen Van Impe ☕ @cudeso]

The @MISPProject workflow module(in 2.4-dev) now also supports ad-hoc or triggerless workflows! https://t.co/QxhBJaxAyE

[CIRCL - @[email protected] @circl_lu]

New features in vulnerability lookup includes sighting from different sources including @MISPProject communities. The example below is a vulnerability in Android but the CVE is not yet published. You can track the sighting evolution.

https://t.co/oD7cG1edwb

#vulnerability #cve

[Xavier Mertens @[email protected] 🇧🇪 @xme]

Hello #MISP 2.5! 👋

[MISP (@[email protected]) @MISPProject]

MISP Galaxy 2024110700 has been released with many updates and improvements.

https://t.co/gva8l8AueE

#opensource #threatintelligence #threatintel #misp #informationsharing

[MISP (@[email protected]) @MISPProject]

@kilijanek We are on Mastodon @[email protected] - https://t.co/F4HaLty6VX

[MISP (@[email protected]) @MISPProject]

Investigating FortiManager Zero-Day Exploitation (CVE-2024-47575)

MISP event https://t.co/m2yLrl2l33
Details about CVE-2024-47575 https://t.co/ukCneU2OhK

#misp #infosec #vulnerability #fortinet

[Koen Van Impe ☕ @cudeso]

New conversion scripts bridge @MISPProject playbooks and CACAO (@OASISopen) security playbooks. Still an initial version but significantly simplifies integration between both formats. #CTI #automation #soar https://t.co/HdLDBwK8Nw

[Koen Van Impe ☕ @cudeso]

Very nice! Visualisations are essential for understanding complex reports.
Also see some ways on how to possibly integrate this in the future with @MISPProject reports and/or playbooks.

[Rectifyq @_rectifyq]

Some of the snippets of the CTF data and attachments imported into @MISPProject

[Koen Van Impe ☕ @cudeso]

Obviously, it will also include some @MISPProject tips&tricks.

[Koen Van Impe ☕ @cudeso]

I created a small script to extract unique hostnames and domains from the DDoSia configuration objects shared via @MISPProject . Post at https://t.co/ax7HuIap5b ; script: https://t.co/8j0pQ47nBx #DDOS