MISP-maltego/README.md

1.4 KiB

Quick start guide

This is a Maltego MISP integration tool allowing you to view (read-only) data from a MISP instance.

Currently supported MISP elements are : Event, Attribute, Object (incl relations), Tag, Taxonomy, Galaxy (incl relations).

Once installed you can start by creating a MISPEvent entity, then load the Machine EventToAll or the transform EventToAttributes.

Alternatively initiate a transform on an existing Maltego entity. The currently supported entities are: AS, DNSName, Domain, EmailAddress, File, Hash, IPv4Address, NSRecord, Person, PhoneNumber, URL, Website

Dependencies:

Installation:

Installation is fairly easy, just read the steps in the documentation.

Screenshot

Screenshot

ATT&CK

License

This software is licensed under GNU Affero General Public License version 3

  • Copyright (C) 2018 Christophe Vandeplas

Note: Before being rewritten from scratch this project was maintained by Emmanuel Bouillon. The code is available in the v1 branch.

The icons in the fontawesome folder are from https://fontawesome.com/ which are licensed SIL OFL 1.1