search

cudeso / misp-tip-of-the-week

A collection of tips for using MISP.
74 stars 8 forks source link

[TIP] Correlation limits #34

Open cudeso opened 2 years ago

cudeso commented 2 years ago

Category

Select one: Threatintel

Tags

correlation pivoting

Tip

Correlations are extremely useful to highlight relations between threat events but they can also kill your environment. Use MISP.correlation_limit to limit correlations to a sane limit. Defaults to 100.

cudeso commented 1 year ago

Closely related to tip 20220819 https://github.com/cudeso/misp-tip-of-the-week/commit/c50dfa9a8e8857a5536c2d008d1db55780f91d52