MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

Indicators of Compromises (IOC) of our various investigations

Extract and aggregate threat intelligence.

Documentation of TheHive

Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension

Clusters and elements to attach to MISP events or attributes (like threat actors)

Python library using the MISP Rest API

Modules for expansion services, import and export in MISP

A helper to run OSINT queries & manage results continuously

Warning lists to inform users of MISP about potential false-positives or other information in indicators

Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing

A dashboard for a real-time overview of threat intelligence from MISP instances

User guide of MISP

🚌 The missing link to connect open-source threat intelligence tools.

All-in-one bundle of MISP, TheHive and Cortex

MISP Docker (XME edition)

Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.

Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings

BTG's purpose is to make fast and efficient search on IOC

Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing

Connect your mail client/infrastructure to MISP in order to create events based on the information contained within mails.

A utility repo to assist with converting between MISP and STIX formats

An OpenTAXII Configuration for MISP

A script to track malware IOCs with OSINT on Twitter.

Threat-Intel repository. API: https://github.com/davidonzo/apiosintDS

Import specific data sources into the Sigma generic and open signature format.

A (nearly) production ready Dockered MISP

Collection of best practices to add OSINT into MISP and/or MISP communities