-
There's a malware sharing platform called "MISP" (or https://github.com/MISP), which might provide a more useful structure for sharing these samples than GitHub.
Found through https://twitter.com/d…
-
Receiving, Falcon API] Error getting Indicators: 403 Client Error: Forbidden for url: https://api.crowdstrike.com/intel/queries/indicators/v1?limit=10000&sort=published_date%7Cdesc&filter=type:'url'%2…
-
In our current setup, we rely on Intrusion Detection Systems (IDS) and firewalls to identify and block malicious IP addresses temporarily to mitigate pending attacks. These systems are crucial for pro…
-
**Logstash information**:
Please include the following information:
1. Logstash version (e.g. `bin/logstash --version`)
8.13.4 (also tested with docker tag 8.15.0)
2. Logstash installation…
-
This came up while investigating a possibly unrelated Mesa bug. Consider [the manywin demo](https://gitlab.freedesktop.org/mesa/demos/-/blob/master/src/xdemos/manywin.c), in which two windows are draw…
nwnk updated
11 months ago
-
I am Ngo Thai Hung, a student from University of Information Technology – UIT. I recently read your publication "**APT-MMF: An advanced persistent threat actor attribution method based on multimodal a…
-
Hello,
I've got the same problem using Filebeat threatintel module.
Here is my configuration from `filebeat.yml` (module enabled: AbuseURL, AbuseMalware and misp) :
```
# Module: threatint…
-
### What do you need?
This is a feature request with example code that should be able to be dropped right into `installer/client/cli/`:
https://gist.github.com/pedramamini/e1f7f9dc6013734fca4496…
-
@carriewright11
For now, I'm just gathering some thoughts and posting some links, I will continue to edit this and make some sort of outline and specific ideas.
## 03-Data_Privacy.Rmd
- [Me…
-
Thanks a lot for your sharing initiative. That's great! Would you make also the files in MISP format directly? We can then automatically add the infoblox threat intelligence in the MISP default OSINT …