# orderedItems[].object.content
The MITRE D3FEND Matrix is now included in MISP galaxy with the corresponding @mitreattack relationships.

https://github.com/MISP/misp-galaxy/is sues/975

Thanks to @cvandeplas for the work.

#threatintelligence #opensource #threatintel #misp #mitre #infosec

@MITREcorp

# orderedItems[].object.contentMap.en
The MITRE D3FEND Matrix is now included in MISP galaxy with the corresponding @mitreattack relationships.

https://github.com/MISP/misp-galaxy/is sues/975

Thanks to @cvandeplas for the work.

#threatintelligence #opensource #threatintel #misp #mitre #infosec

@MITREcorp

# orderedItems[].object.attachment[].name
The MITRE D3FEND Matrix is now included in MISP galaxy with the corresponding @MITREattack relationships.

# orderedItems[].object.attachment[].name
The MITRE D3FEND Matrix is now included in MISP galaxy with the corresponding @MITREattack relationships.

# orderedItems[].object.content
The MISP galaxy evolved into a complete set of knowledge base freely accessible to many projects including MISP. At the EU ATT&CK community workshop, we presented the recommendations for models creator:

Slides: https://raw.githubusercontent.com/MISP/misp-training/main/x.17-eu-attack-community/misp-project-attack-20240517.pdf

Website: https://www. misp-galaxy.org/

#threatintelligence #threatintel #opensource #misp #infosec

@adulau

# orderedItems[].object.contentMap.en
The MISP galaxy evolved into a complete set of knowledge base freely accessible to many projects including MISP. At the EU ATT&CK community workshop, we presented the recommendations for models creator:

Slides: https://raw.githubusercontent.com/MISP/misp-training/main/x.17-eu-attack-community/misp-project-attack-20240517.pdf

Website: https://www. misp-galaxy.org/

#threatintelligence #threatintel #opensource #misp #infosec

@adulau

# orderedItems[].object.attachment[].name
Models introduced as MISP galaxy over time.

# orderedItems[].object.content
Using your MISP IoCs in Kunai, the open source EDR for Linux.

@kunai_project

#edr #infosec #opensource #misp #threatintelligence

🔗 https://www. misp-project.org/2024/04/19/Us ing-Your-MISP-IoCs-in-Kunai.html/

# orderedItems[].object.contentMap.en
Using your MISP IoCs in Kunai, the open source EDR for Linux.

@kunai_project

#edr #infosec #opensource #misp #threatintelligence

🔗 https://www. misp-project.org/2024/04/19/Us ing-Your-MISP-IoCs-in-Kunai.html/

# orderedItems[].object.content
MISP 2.4.192 released with many performance improvement, fixes and updates.

#misp #ThreatIntel #threatintelligence #opensource

https://www. misp-project.org/2024/05/07/MI SP.2.4.192.released.html/

# orderedItems[].object.contentMap.en
MISP 2.4.192 released with many performance improvement, fixes and updates.

#misp #ThreatIntel #threatintelligence #opensource

https://www. misp-project.org/2024/05/07/MI SP.2.4.192.released.html/

# orderedItems[].object.content
MISP 2.4.190 (and 2.4.191) released with new feed improvement, workflows and a new benchmarking suite.

https://www. misp-project.org/2024/04/22/MI SP.2.4.190-2.4.191.released.html/

#misp #opensource #threatintelligence #threatintel

# orderedItems[].object.contentMap.en
MISP 2.4.190 (and 2.4.191) released with new feed improvement, workflows and a new benchmarking suite.

https://www. misp-project.org/2024/04/22/MI SP.2.4.190-2.4.191.released.html/

#misp #opensource #threatintelligence #threatintel

# orderedItems[].object.content
We are pleased to announce the immediate release of MISP 2.4.189, released with bug fixes, performance improvements and a new blocklist feature.

🔗 https://www. misp-project.org/2024/04/12/MI SP.2.4.189.released.html/

#opensource #misp #threatintelligence #threatintel #cti

# orderedItems[].object.contentMap.en
We are pleased to announce the immediate release of MISP 2.4.189, released with bug fixes, performance improvements and a new blocklist feature.

🔗 https://www. misp-project.org/2024/04/12/MI SP.2.4.189.released.html/

#opensource #misp #threatintelligence #threatintel #cti

# orderedItems[].object.content
MISP - Elastic Stack - Docker Lab

This lab explains how to connect MISP to the Elastic Stack in order to leverage IOCs from MISP and trigger alerts based on user defined rules.

https://www. misp-project.org/2024/04/05/el astic-misp-docker.html/

#misp #elastic #threatintel #threatintelligence #opensource #siem #infosec

# orderedItems[].object.contentMap.en
MISP - Elastic Stack - Docker Lab

This lab explains how to connect MISP to the Elastic Stack in order to leverage IOCs from MISP and trigger alerts based on user defined rules.

https://www. misp-project.org/2024/04/05/el astic-misp-docker.html/

#misp #elastic #threatintel #threatintelligence #opensource #siem #infosec

# orderedItems[].object.content
MISP 2.4.188 released with major performance improvements, enhancement and many bugs fixed.

🔗 https://www. misp-project.org/2024/03/25/MI SP.2.4.188.released.html/

#misp #opensource #threatintel #threatintelligence

# orderedItems[].object.contentMap.en
MISP 2.4.188 released with major performance improvements, enhancement and many bugs fixed.

🔗 https://www. misp-project.org/2024/03/25/MI SP.2.4.188.released.html/

#misp #opensource #threatintel #threatintelligence

# orderedItems[].object.content
MISP 2.4.187 released, including security fixes, new features and bugs fixes.

🔗 https://www. misp-project.org/2024/03/24/MI SP.2.4.187.released.html/

#misp #opensource #threatintel

# orderedItems[].object.contentMap.en
MISP 2.4.187 released, including security fixes, new features and bugs fixes.

🔗 https://www. misp-project.org/2024/03/24/MI SP.2.4.187.released.html/

#misp #opensource #threatintel

# orderedItems[].object.content
We are pleased to announce the immediate release of MISP 2.4.186, which includes two major new feature called “Analyst Data” and “Collections” along with an extension to the MISP standard format.

🔗 https://www. misp-project.org/2024/03/06/MI SP.2.4.186.released.html/

#ThreatIntel #ThreatIntelligence #misp #infosec #opensource #cti

# orderedItems[].object.contentMap.en
We are pleased to announce the immediate release of MISP 2.4.186, which includes two major new feature called “Analyst Data” and “Collections” along with an extension to the MISP standard format.

🔗 https://www. misp-project.org/2024/03/06/MI SP.2.4.186.released.html/

#ThreatIntel #ThreatIntelligence #misp #infosec #opensource #cti

# orderedItems[].object.attachment[].name
Analyst Data Feature

The Analyst Data feature is an extended and shareable set of capabilities that allows analysts to share and add their own analysis to any MISP event.

The Analyst Data feature comprises three main new features:

    Adding an Analyst Note to any element in MISP, such as Event, Event Report, Object, Attribute, or Galaxy Cluster.
    Adding an Analyst Opinion with a rating (between 0 and 100) to any element in MISP, such as Event, Event Report, Object, Attribute, Galaxy Cluster, or Analyst Note.
    Adding an Analyst Relationship from/to any element in MISP with a specified relationship type.

This enhancement provides highly flexible capabilities for analysts to describe information about specific details. Analyst Data, similarly to Events and Galaxy clusters, are first class citizens, respecting ownership and distribution mechanisms as well as being synchronisable between MISP instances.

# orderedItems[].object.content
The article discusses HarfangLab's integration of MISP for enhancing their Endpoint Detection and Response (EDR) capabilities. It highlights how MISP centralizes the management of detection rules, facilitating their distribution to customer systems, both in SaaS and On-Premise configurations. The article also touches on the use of standard formats like YARA and Sigma for rule creation, which are integrated into MISP to improve the detection engines of HarfangLab's EDR.

https://www. misp-project.org/2024/02/26/Ha rfangLab_use-case_with_MISP.html/

# orderedItems[].object.contentMap.en
The article discusses HarfangLab's integration of MISP for enhancing their Endpoint Detection and Response (EDR) capabilities. It highlights how MISP centralizes the management of detection rules, facilitating their distribution to customer systems, both in SaaS and On-Premise configurations. The article also touches on the use of standard formats like YARA and Sigma for rule creation, which are integrated into MISP to improve the detection engines of HarfangLab's EDR.

https://www. misp-project.org/2024/02/26/Ha rfangLab_use-case_with_MISP.html/

# orderedItems[].object.content
MISP will be at the @firstdotorg CTI 2024 in Berlin with a workshop MISP API and Automation Workshop - Monday, April 15th 2024 14:00-18:00.

https://www. misp-project.org/events/

#cti #ThreatIntel #misp #opensource

# orderedItems[].object.contentMap.en
MISP will be at the @firstdotorg CTI 2024 in Berlin with a workshop MISP API and Automation Workshop - Monday, April 15th 2024 14:00-18:00.

https://www. misp-project.org/events/

#cti #ThreatIntel #misp #opensource