-
**Describe the bug**
The IDEA0 format does not have all the options we need to report an alert correctly. In particular IDEA0 still wants each alert to have a Source and a Destination of the attack, w…
-
### Support Questions
I am using Postman to try and add an event to MISP. However, when I send the POST, the event doesn't come up in the event list.
I know the API URL works and authorization t…
-
Something to pull IOCs out of PCAPs since that's a common file format exported by security tools.
This should be fairly compatible with the new MISP objects as well
-
I'm looking to add some types to MISP:
Network activity:
* hostname|ip-src
* hostname|ip-dst
* hostname|port
Payload delivery:
* hostname|ip-src
* hostname|ip-dst
* domain|ip-src
* domain|i…
-
Add scheduled tasks
-
We have a complete MISP galaxy with [AMITT](https://github.com/MISP/misp-galaxy/blob/main/clusters/misinfosec-amitt-misinformation-pattern.json) which is significantly used by many MISP users.
We l…
-
Netflow v5/v9 object
-
### Actual behavior
Trying to install MISP on a fresh stock AWS Ubuntu 20.04 machine fails
Installing with bash ./INSTALL.sh -c
The following messages loop indefinitely (well at least overnigh…
-
### Definition of the scope
We need support of:
- [ ] users (login, password, email, api key)
- [ ] admin dashboard: creation, edition, validation of accounts, etc.
- [ ] account creation…
-
Hi - Not sure if this is the right forum, thought I would post here.
I have tried to Install MISP using Docker and was following the guide and online help.
Everything went well, until when I run…