Technology and tools
What is MISP?
An open-source threat intelligence sharing platform for storing, correlating and exchanging indicators and events between organisations.
MISP is an open-source platform for collecting, storing, correlating and sharing threat intelligence. Data is organised into events containing attributes such as hashes, domains and IPs, with tags such as TLP labels and ATT&CK techniques.
MISP instances can synchronise with each other, which makes it a common backbone for sector sharing groups and national CERTs. It also exports to STIX and to formats that security tools can consume directly.