#misp — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #misp, aggregated by home.social.
-
This release includes a major new feature: a graph visualisation for the MISP standard and STIX format, making it easier to explore, understand, and present CTI data structures directly from JSON.
CTI Transmute is an online service available at cti-transmute.org and also an open source project available on GitHub.
The FIRST CTI 2026 conference in Munich was a great source of feedback for this release. Many of the improvements and new features introduced in v1.2 came directly from discussions, demonstrations, and feedback gathered during the event. Thank you to everyone who tested, commented, challenged ideas, and shared practical use cases.
#cti #stix #misp #standard #interoperability #cybersecurity
🔗 Release notes CTI Transmute https://github.com/MISP/cti-transmute
🔗 Release notes misp-stix https://github.com/MISP/misp-stix/releases/tag/2026.5.13 -
This release includes a major new feature: a graph visualisation for the MISP standard and STIX format, making it easier to explore, understand, and present CTI data structures directly from JSON.
CTI Transmute is an online service available at cti-transmute.org and also an open source project available on GitHub.
The FIRST CTI 2026 conference in Munich was a great source of feedback for this release. Many of the improvements and new features introduced in v1.2 came directly from discussions, demonstrations, and feedback gathered during the event. Thank you to everyone who tested, commented, challenged ideas, and shared practical use cases.
#cti #stix #misp #standard #interoperability #cybersecurity
🔗 Release notes CTI Transmute https://github.com/MISP/cti-transmute
🔗 Release notes misp-stix https://github.com/MISP/misp-stix/releases/tag/2026.5.13 -
This release includes a major new feature: a graph visualisation for the MISP standard and STIX format, making it easier to explore, understand, and present CTI data structures directly from JSON.
CTI Transmute is an online service available at cti-transmute.org and also an open source project available on GitHub.
The FIRST CTI 2026 conference in Munich was a great source of feedback for this release. Many of the improvements and new features introduced in v1.2 came directly from discussions, demonstrations, and feedback gathered during the event. Thank you to everyone who tested, commented, challenged ideas, and shared practical use cases.
#cti #stix #misp #standard #interoperability #cybersecurity
🔗 Release notes CTI Transmute https://github.com/MISP/cti-transmute
🔗 Release notes misp-stix https://github.com/MISP/misp-stix/releases/tag/2026.5.13 -
This release includes a major new feature: a graph visualisation for the MISP standard and STIX format, making it easier to explore, understand, and present CTI data structures directly from JSON.
CTI Transmute is an online service available at cti-transmute.org and also an open source project available on GitHub.
The FIRST CTI 2026 conference in Munich was a great source of feedback for this release. Many of the improvements and new features introduced in v1.2 came directly from discussions, demonstrations, and feedback gathered during the event. Thank you to everyone who tested, commented, challenged ideas, and shared practical use cases.
#cti #stix #misp #standard #interoperability #cybersecurity
🔗 Release notes CTI Transmute https://github.com/MISP/cti-transmute
🔗 Release notes misp-stix https://github.com/MISP/misp-stix/releases/tag/2026.5.13 -
This release includes a major new feature: a graph visualisation for the MISP standard and STIX format, making it easier to explore, understand, and present CTI data structures directly from JSON.
CTI Transmute is an online service available at cti-transmute.org and also an open source project available on GitHub.
The FIRST CTI 2026 conference in Munich was a great source of feedback for this release. Many of the improvements and new features introduced in v1.2 came directly from discussions, demonstrations, and feedback gathered during the event. Thank you to everyone who tested, commented, challenged ideas, and shared practical use cases.
#cti #stix #misp #standard #interoperability #cybersecurity
🔗 Release notes CTI Transmute https://github.com/MISP/cti-transmute
🔗 Release notes misp-stix https://github.com/MISP/misp-stix/releases/tag/2026.5.13 -
The Synthetic Exercise World Format provides fictional countries, companies, sectors, and threat actors with structured metadata for neutral CTI examples, exercises, interoperability tests, and standards documentation without referencing real-world sensitive entities.
I just released version 1.0.
#cti #opensource #misp #cybersecurity #threatintelligence #threatintel
🔗 GitHub - https://github.com/MISP/Synthetic-Exercise-World-Format
-
The Synthetic Exercise World Format provides fictional countries, companies, sectors, and threat actors with structured metadata for neutral CTI examples, exercises, interoperability tests, and standards documentation without referencing real-world sensitive entities.
I just released version 1.0.
#cti #opensource #misp #cybersecurity #threatintelligence #threatintel
🔗 GitHub - https://github.com/MISP/Synthetic-Exercise-World-Format
-
The Synthetic Exercise World Format provides fictional countries, companies, sectors, and threat actors with structured metadata for neutral CTI examples, exercises, interoperability tests, and standards documentation without referencing real-world sensitive entities.
I just released version 1.0.
#cti #opensource #misp #cybersecurity #threatintelligence #threatintel
🔗 GitHub - https://github.com/MISP/Synthetic-Exercise-World-Format
-
The Synthetic Exercise World Format provides fictional countries, companies, sectors, and threat actors with structured metadata for neutral CTI examples, exercises, interoperability tests, and standards documentation without referencing real-world sensitive entities.
I just released version 1.0.
#cti #opensource #misp #cybersecurity #threatintelligence #threatintel
🔗 GitHub - https://github.com/MISP/Synthetic-Exercise-World-Format
-
The Synthetic Exercise World Format provides fictional countries, companies, sectors, and threat actors with structured metadata for neutral CTI examples, exercises, interoperability tests, and standards documentation without referencing real-world sensitive entities.
I just released version 1.0.
#cti #opensource #misp #cybersecurity #threatintelligence #threatintel
🔗 GitHub - https://github.com/MISP/Synthetic-Exercise-World-Format
-
Drone and UAV Forensic
This repository is designed to accelerate the forensic analysis of DIY FPV drones and to help automate technical reporting from seized or recovered artifacts.
The goal is pragmatic: extract useful evidence faster, normalize outputs, and produce data that can be reused in reports or shared into investigative platforms such as MISP.
🔗 https://github.com/CIRCL/Drone-Forensic
#drone #uav #opensource #dfir #threatintelligence #threatintel #misp #digitalforensics
-
Drone and UAV Forensic
This repository is designed to accelerate the forensic analysis of DIY FPV drones and to help automate technical reporting from seized or recovered artifacts.
The goal is pragmatic: extract useful evidence faster, normalize outputs, and produce data that can be reused in reports or shared into investigative platforms such as MISP.
🔗 https://github.com/CIRCL/Drone-Forensic
#drone #uav #opensource #dfir #threatintelligence #threatintel #misp #digitalforensics
-
Drone and UAV Forensic
This repository is designed to accelerate the forensic analysis of DIY FPV drones and to help automate technical reporting from seized or recovered artifacts.
The goal is pragmatic: extract useful evidence faster, normalize outputs, and produce data that can be reused in reports or shared into investigative platforms such as MISP.
🔗 https://github.com/CIRCL/Drone-Forensic
#drone #uav #opensource #dfir #threatintelligence #threatintel #misp #digitalforensics
-
Drone and UAV Forensic
This repository is designed to accelerate the forensic analysis of DIY FPV drones and to help automate technical reporting from seized or recovered artifacts.
The goal is pragmatic: extract useful evidence faster, normalize outputs, and produce data that can be reused in reports or shared into investigative platforms such as MISP.
🔗 https://github.com/CIRCL/Drone-Forensic
#drone #uav #opensource #dfir #threatintelligence #threatintel #misp #digitalforensics
-
Drone and UAV Forensic
This repository is designed to accelerate the forensic analysis of DIY FPV drones and to help automate technical reporting from seized or recovered artifacts.
The goal is pragmatic: extract useful evidence faster, normalize outputs, and produce data that can be reused in reports or shared into investigative platforms such as MISP.
🔗 https://github.com/CIRCL/Drone-Forensic
#drone #uav #opensource #dfir #threatintelligence #threatintel #misp #digitalforensics
-
Some updates on the MISP Galaxy website:
https://www.misp-galaxy.org/mitre-fraud-framework/#
It now includes a matrix-like view of the galaxy for @misp
-
Some updates on the MISP Galaxy website:
https://www.misp-galaxy.org/mitre-fraud-framework/#
It now includes a matrix-like view of the galaxy for @misp
-
Some updates on the MISP Galaxy website:
https://www.misp-galaxy.org/mitre-fraud-framework/#
It now includes a matrix-like view of the galaxy for @misp
-
Some updates on the MISP Galaxy website:
https://www.misp-galaxy.org/mitre-fraud-framework/#
It now includes a matrix-like view of the galaxy for @misp
-
Some updates on the MISP Galaxy website:
https://www.misp-galaxy.org/mitre-fraud-framework/#
It now includes a matrix-like view of the galaxy for @misp
-
Excited to share that the MITRE Fight Fraud Framework™ (F3) is now included in the default MISP galaxy and available across all MISP instances.
F3 is a curated knowledge base of tactics and techniques used by financial fraud actors, helping analysts structure, share, and enrich fraud-related intelligence more effectively.
A great step forward for the MISP community and for teams tracking financial fraud.
🔗 https://github.com/MISP/misp-galaxy
#misp #financialfraud #threatintel #threatintelligence #opensource
#financial -
Excited to share that the MITRE Fight Fraud Framework™ (F3) is now included in the default MISP galaxy and available across all MISP instances.
F3 is a curated knowledge base of tactics and techniques used by financial fraud actors, helping analysts structure, share, and enrich fraud-related intelligence more effectively.
A great step forward for the MISP community and for teams tracking financial fraud.
🔗 https://github.com/MISP/misp-galaxy
#misp #financialfraud #threatintel #threatintelligence #opensource
#financial -
Excited to share that the MITRE Fight Fraud Framework™ (F3) is now included in the default MISP galaxy and available across all MISP instances.
F3 is a curated knowledge base of tactics and techniques used by financial fraud actors, helping analysts structure, share, and enrich fraud-related intelligence more effectively.
A great step forward for the MISP community and for teams tracking financial fraud.
🔗 https://github.com/MISP/misp-galaxy
#misp #financialfraud #threatintel #threatintelligence #opensource
#financial -
Excited to share that the MITRE Fight Fraud Framework™ (F3) is now included in the default MISP galaxy and available across all MISP instances.
F3 is a curated knowledge base of tactics and techniques used by financial fraud actors, helping analysts structure, share, and enrich fraud-related intelligence more effectively.
A great step forward for the MISP community and for teams tracking financial fraud.
🔗 https://github.com/MISP/misp-galaxy
#misp #financialfraud #threatintel #threatintelligence #opensource
#financial -
Excited to share that the MITRE Fight Fraud Framework™ (F3) is now included in the default MISP galaxy and available across all MISP instances.
F3 is a curated knowledge base of tactics and techniques used by financial fraud actors, helping analysts structure, share, and enrich fraud-related intelligence more effectively.
A great step forward for the MISP community and for teams tracking financial fraud.
🔗 https://github.com/MISP/misp-galaxy
#misp #financialfraud #threatintel #threatintelligence #opensource
#financial -
@threatchain general purpose siem, malcolm ids, debian server, opnsense - good combo imo, good licensing,. I may just refactor and use 500gb drives so cost will not be the limiting factor, you can use debian blends too but even some of these specialized apps won't have included forensics-full and this has a ton of super usefull sw, when you have the persistence partition going corner case use cases can be covered better than say something like a bootable iso #rational clear case #mw #smw #yacy 3jenkins #ntop-ng #misp #cms #lamp server #sbom #addons #app armor #selinux #ufw #fail2ban #hardened debian #pentoo
-
@threatchain general purpose siem, malcolm ids, debian server, opnsense - good combo imo, good licensing,. I may just refactor and use 500gb drives so cost will not be the limiting factor, you can use debian blends too but even some of these specialized apps won't have included forensics-full and this has a ton of super usefull sw, when you have the persistence partition going corner case use cases can be covered better than say something like a bootable iso #rational clear case #mw #smw #yacy 3jenkins #ntop-ng #misp #cms #lamp server #sbom #addons #app armor #selinux #ufw #fail2ban #hardened debian #pentoo
-
@threatchain general purpose siem, malcolm ids, debian server, opnsense - good combo imo, good licensing,. I may just refactor and use 500gb drives so cost will not be the limiting factor, you can use debian blends too but even some of these specialized apps won't have included forensics-full and this has a ton of super usefull sw, when you have the persistence partition going corner case use cases can be covered better than say something like a bootable iso #rational clear case #mw #smw #yacy 3jenkins #ntop-ng #misp #cms #lamp server #sbom #addons #app armor #selinux #ufw #fail2ban #hardened debian #pentoo
-
@threatchain general purpose siem, malcolm ids, debian server, opnsense - good combo imo, good licensing,. I may just refactor and use 500gb drives so cost will not be the limiting factor, you can use debian blends too but even some of these specialized apps won't have included forensics-full and this has a ton of super usefull sw, when you have the persistence partition going corner case use cases can be covered better than say something like a bootable iso #rational clear case #mw #smw #yacy 3jenkins #ntop-ng #misp #cms #lamp server #sbom #addons #app armor #selinux #ufw #fail2ban #hardened debian #pentoo
-
What really impresses me is the creativity still thriving around the MISP project. I maintain MISP warning-lists for years to help filter false positives, and this week @iglocska built a new stand-alone #rust application for fast warning-list lookups, independent of MISP.
#rust #misp #cybersecurity #cti #threatintelligence #opensource
🔗 Source code of misp-feedback https://github.com/MISP/misp-feedback
🔗 misp-warninglists https://github.com/MISP/misp-warninglists -
What really impresses me is the creativity still thriving around the MISP project. I maintain MISP warning-lists for years to help filter false positives, and this week @iglocska built a new stand-alone #rust application for fast warning-list lookups, independent of MISP.
#rust #misp #cybersecurity #cti #threatintelligence #opensource
🔗 Source code of misp-feedback https://github.com/MISP/misp-feedback
🔗 misp-warninglists https://github.com/MISP/misp-warninglists -
What really impresses me is the creativity still thriving around the MISP project. I maintain MISP warning-lists for years to help filter false positives, and this week @iglocska built a new stand-alone #rust application for fast warning-list lookups, independent of MISP.
#rust #misp #cybersecurity #cti #threatintelligence #opensource
🔗 Source code of misp-feedback https://github.com/MISP/misp-feedback
🔗 misp-warninglists https://github.com/MISP/misp-warninglists -
What really impresses me is the creativity still thriving around the MISP project. I maintain MISP warning-lists for years to help filter false positives, and this week @iglocska built a new stand-alone #rust application for fast warning-list lookups, independent of MISP.
#rust #misp #cybersecurity #cti #threatintelligence #opensource
🔗 Source code of misp-feedback https://github.com/MISP/misp-feedback
🔗 misp-warninglists https://github.com/MISP/misp-warninglists -
What really impresses me is the creativity still thriving around the MISP project. I maintain MISP warning-lists for years to help filter false positives, and this week @iglocska built a new stand-alone #rust application for fast warning-list lookups, independent of MISP.
#rust #misp #cybersecurity #cti #threatintelligence #opensource
🔗 Source code of misp-feedback https://github.com/MISP/misp-feedback
🔗 misp-warninglists https://github.com/MISP/misp-warninglists -
We are happy to announce the release of MISP v2.5.36, which includes new geolocation and map visualisation capabilities, the continued development of the Overmind UI, a new interactive CLI shell UI, important security fixes, and installer improvements.
-
We are happy to announce the release of MISP v2.5.36, which includes new geolocation and map visualisation capabilities, the continued development of the Overmind UI, a new interactive CLI shell UI, important security fixes, and installer improvements.
-
We are happy to announce the release of MISP v2.5.36, which includes new geolocation and map visualisation capabilities, the continued development of the Overmind UI, a new interactive CLI shell UI, important security fixes, and installer improvements.
-
We are happy to announce the release of MISP v2.5.36, which includes new geolocation and map visualisation capabilities, the continued development of the Overmind UI, a new interactive CLI shell UI, important security fixes, and installer improvements.
-
We are happy to announce the release of MISP v2.5.36, which includes new geolocation and map visualisation capabilities, the continued development of the Overmind UI, a new interactive CLI shell UI, important security fixes, and installer improvements.
-
I'm happy to announce the long-awaited first release of misp-modules-cli version 1.0.0.
This initial release makes it nifty and convenient to use MISP expansion modules directly from the command line, whether you are working against a local or remote misp-modules service. The goal is simple: bring the power of misp-modules into a lightweight CLI workflow that is easy to script, automate, and integrate into daily analysis work.
#misp #mispmodules #threatintelligence #threatintel #opensource #cli #cybersecurity #osint
🔗 Release note https://github.com/MISP/misp-modules-cli/releases/tag/v1.0
:github: misp-modules-cli https://github.com/MISP/misp-modules-cli
:github: misp-modules https://github.com/MISP/misp-modules -
I'm happy to announce the long-awaited first release of misp-modules-cli version 1.0.0.
This initial release makes it nifty and convenient to use MISP expansion modules directly from the command line, whether you are working against a local or remote misp-modules service. The goal is simple: bring the power of misp-modules into a lightweight CLI workflow that is easy to script, automate, and integrate into daily analysis work.
#misp #mispmodules #threatintelligence #threatintel #opensource #cli #cybersecurity #osint
🔗 Release note https://github.com/MISP/misp-modules-cli/releases/tag/v1.0
:github: misp-modules-cli https://github.com/MISP/misp-modules-cli
:github: misp-modules https://github.com/MISP/misp-modules -
I'm happy to announce the long-awaited first release of misp-modules-cli version 1.0.0.
This initial release makes it nifty and convenient to use MISP expansion modules directly from the command line, whether you are working against a local or remote misp-modules service. The goal is simple: bring the power of misp-modules into a lightweight CLI workflow that is easy to script, automate, and integrate into daily analysis work.
#misp #mispmodules #threatintelligence #threatintel #opensource #cli #cybersecurity #osint
🔗 Release note https://github.com/MISP/misp-modules-cli/releases/tag/v1.0
:github: misp-modules-cli https://github.com/MISP/misp-modules-cli
:github: misp-modules https://github.com/MISP/misp-modules -
I'm happy to announce the long-awaited first release of misp-modules-cli version 1.0.0.
This initial release makes it nifty and convenient to use MISP expansion modules directly from the command line, whether you are working against a local or remote misp-modules service. The goal is simple: bring the power of misp-modules into a lightweight CLI workflow that is easy to script, automate, and integrate into daily analysis work.
#misp #mispmodules #threatintelligence #threatintel #opensource #cli #cybersecurity #osint
🔗 Release note https://github.com/MISP/misp-modules-cli/releases/tag/v1.0
:github: misp-modules-cli https://github.com/MISP/misp-modules-cli
:github: misp-modules https://github.com/MISP/misp-modules -
I'm happy to announce the long-awaited first release of misp-modules-cli version 1.0.0.
This initial release makes it nifty and convenient to use MISP expansion modules directly from the command line, whether you are working against a local or remote misp-modules service. The goal is simple: bring the power of misp-modules into a lightweight CLI workflow that is easy to script, automate, and integrate into daily analysis work.
#misp #mispmodules #threatintelligence #threatintel #opensource #cli #cybersecurity #osint
🔗 Release note https://github.com/MISP/misp-modules-cli/releases/tag/v1.0
:github: misp-modules-cli https://github.com/MISP/misp-modules-cli
:github: misp-modules https://github.com/MISP/misp-modules -
Das Land Hessen geht mit einer MISP-Instanz des Hessen3C einen wichtigen Schritt für die kommunale Informationssicherheit.
🔎 Strukturierter IoC-Austausch ermöglicht ein gemeinsames Lagebild statt isolierter Reaktion.
🟢 TLP:GREEN erlaubt die direkte Nutzung im SIEM (z. B. Detektion & Anreicherung).
🤝 Kommunen werden Teil eines gemeinsamen Sicherheitsnetzwerks.Mehrwert:
• bessere Detektion
• weniger Blindflug
• stärkere Zusammenarbeit⚙️ Herausforderung: SIEM/TI-Betrieb ist für viele Kommunen kaum leistbar → ein landesweiter SOC-Dienst wäre ein logischer nächster Schritt.
💡 Fazit: strategischer Baustein für vernetzte Informationssicherheit.
https://hessen3c.de/meldungen-neuigkeiten/misp-instanz-ermoeglicht-ioc-austausch-mit-kommunen
-
Das Land Hessen geht mit einer MISP-Instanz des Hessen3C einen wichtigen Schritt für die kommunale Informationssicherheit.
🔎 Strukturierter IoC-Austausch ermöglicht ein gemeinsames Lagebild statt isolierter Reaktion.
🟢 TLP:GREEN erlaubt die direkte Nutzung im SIEM (z. B. Detektion & Anreicherung).
🤝 Kommunen werden Teil eines gemeinsamen Sicherheitsnetzwerks.Mehrwert:
• bessere Detektion
• weniger Blindflug
• stärkere Zusammenarbeit⚙️ Herausforderung: SIEM/TI-Betrieb ist für viele Kommunen kaum leistbar → ein landesweiter SOC-Dienst wäre ein logischer nächster Schritt.
💡 Fazit: strategischer Baustein für vernetzte Informationssicherheit.
https://hessen3c.de/meldungen-neuigkeiten/misp-instanz-ermoeglicht-ioc-austausch-mit-kommunen
-
Das Land Hessen geht mit einer MISP-Instanz des Hessen3C einen wichtigen Schritt für die kommunale Informationssicherheit.
🔎 Strukturierter IoC-Austausch ermöglicht ein gemeinsames Lagebild statt isolierter Reaktion.
🟢 TLP:GREEN erlaubt die direkte Nutzung im SIEM (z. B. Detektion & Anreicherung).
🤝 Kommunen werden Teil eines gemeinsamen Sicherheitsnetzwerks.Mehrwert:
• bessere Detektion
• weniger Blindflug
• stärkere Zusammenarbeit⚙️ Herausforderung: SIEM/TI-Betrieb ist für viele Kommunen kaum leistbar → ein landesweiter SOC-Dienst wäre ein logischer nächster Schritt.
💡 Fazit: strategischer Baustein für vernetzte Informationssicherheit.
https://hessen3c.de/meldungen-neuigkeiten/misp-instanz-ermoeglicht-ioc-austausch-mit-kommunen
-
Das Land Hessen geht mit einer MISP-Instanz des Hessen3C einen wichtigen Schritt für die kommunale Informationssicherheit.
🔎 Strukturierter IoC-Austausch ermöglicht ein gemeinsames Lagebild statt isolierter Reaktion.
🟢 TLP:GREEN erlaubt die direkte Nutzung im SIEM (z. B. Detektion & Anreicherung).
🤝 Kommunen werden Teil eines gemeinsamen Sicherheitsnetzwerks.Mehrwert:
• bessere Detektion
• weniger Blindflug
• stärkere Zusammenarbeit⚙️ Herausforderung: SIEM/TI-Betrieb ist für viele Kommunen kaum leistbar → ein landesweiter SOC-Dienst wäre ein logischer nächster Schritt.
💡 Fazit: strategischer Baustein für vernetzte Informationssicherheit.
https://hessen3c.de/meldungen-neuigkeiten/misp-instanz-ermoeglicht-ioc-austausch-mit-kommunen
-
Das Land Hessen geht mit einer MISP-Instanz des Hessen3C einen wichtigen Schritt für die kommunale Informationssicherheit.
🔎 Strukturierter IoC-Austausch ermöglicht ein gemeinsames Lagebild statt isolierter Reaktion.
🟢 TLP:GREEN erlaubt die direkte Nutzung im SIEM (z. B. Detektion & Anreicherung).
🤝 Kommunen werden Teil eines gemeinsamen Sicherheitsnetzwerks.Mehrwert:
• bessere Detektion
• weniger Blindflug
• stärkere Zusammenarbeit⚙️ Herausforderung: SIEM/TI-Betrieb ist für viele Kommunen kaum leistbar → ein landesweiter SOC-Dienst wäre ein logischer nächster Schritt.
💡 Fazit: strategischer Baustein für vernetzte Informationssicherheit.
https://hessen3c.de/meldungen-neuigkeiten/misp-instanz-ermoeglicht-ioc-austausch-mit-kommunen
-
🛡️ New to #MISP? Events are the core building blocks — grouping indicators, context, and analysis into one shareable unit. Learn how to create, structure, and tag events effectively 👇 www.gomisp.com/post/events-... #ThreatIntelligence #SOC #CyberSecurity
Events in MISP - Creating, Tag...