A threat intelligence platform for sharing, storing and correlating Indicators of Compromise of targeted attacks, threat intelligence, financial fraud information, vulnerability information or even counter-terrorism information.
The Dataminr integration with the Malware Information Sharing Platform (MISP) enables you to import MISP Events and Attributes into Dataminr as Incidents and Indicators [Address, Host, Email Address, Email Subject, URL, CIDR, File, ASN, and User Agent], respectively. Improvements to this app include:
This app can be found in the Dataminr App Catalog under the names: MISP Import (v2.0.1)
The Investigation Insights – MISP integration enables analysts to get the most out of their open-source MISP threat intelligence platform. Analysts can quickly understand the scope of an indicator, knowing what the indicator is related to and how it could affect their company. Analysts can also add or remove tags, enriching the indicators for other analysts.
The Investigation Insights – MISP IOC Submission integration enables analysts to quickly enrich their MISP TIP by bulk adding in indicators to the system. Enabling teams to have a full enriched platform.
The Investigation Insights – MISP Warning Lists integration enables analysts to quickly know if the indicator is well known and could be potentially associated with a false positive.
