WDavid404 / THM_CyberDefense

0 stars 0 forks source link

Threat and Vulnerability Management -- MISP #4

Open WDavid404 opened 7 months ago

WDavid404 commented 7 months ago

MISP

MISP (Malware Information Sharing Platform) is an open-source threat information platform that facilitates the collection, storage and distribution of threat intelligence and Indicators of Compromise (IOCs) related to malware, cyber attacks, financial fraud or any intelligence within a community of trusted members.

image

Event Management

The Event Actions tab is where you, as an analyst, will create all malware investigation correlations by providing descriptions and attributes associated with the investigation. Splitting the process into three significant phases, we have: