MISP / misp-playbooks

MISP Playbooks
https://misp.github.io/misp-playbooks/
BSD 2-Clause "Simplified" License
174 stars 17 forks source link

Have scheduled playbooks #47

Open cudeso opened 11 months ago

cudeso commented 11 months ago

Traditionally playbooks are executed based on a human trigger. With the help of Papermill, Paperboy and inspired by work done by Netflix it is possible to parametrise and schedule the execution of Jupyter notebooks.

In this activity the possibilities are explored for running scheduled MISP playbooks. The concept of scheduled playbooks gives the opportunity to provide analysts regular reports with the results of the executed playbook, and at the same time gives these analysts an environment where they can easily update the documentation and the code that is being executed. The scheduled playbooks can also serve as some form of automation.