MISP
/
MISP-maltego
mirror of https://github.com/MISP/MISP-maltego
2
0
Fork 0
Code Issues Releases Wiki Activity
Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.
66 Commits
2 Branches
7 Tags
5 MiB
Python 97.6%
Dockerfile 2.3%
Shell 0.1%
 
 
 
Go to file
Christophe Vandeplas c40e776462 chg: [transform] improved performance EventTo containing attachments 2019-06-12 12:38:58 +03:00
doc new: [doc] Installation using pip 2019-05-22 10:29:43 +02:00
src/MISP_maltego chg: [transform] improved performance EventTo containing attachments 2019-06-12 12:38:58 +03:00
.canari
…
.gitignore new: [doc] Installation using pip 2019-05-22 10:29:43 +02:00
.mrbob.ini
…
LICENSE
…
MANIFEST.in
…
README.md new: [doc] Installation using pip 2019-05-22 10:29:43 +02:00
publish_to_pip.sh new: [transform] new object to relations transform + reverse relations 2019-05-24 17:06:07 +03:00
setup.py new: [transform] new object to relations transform + reverse relations 2019-05-24 17:06:07 +03:00

README.md

Quick start guide

This is a Maltego MISP integration tool allowing you to view (read-only) data from a MISP instance.

It also allows browsing through the MITRE ATT&CK entities.

Currently supported MISP elements are : Event, Attribute, Object (incl relations), Tag, Taxonomy, Galaxy (incl relations).

Once installed you can start by creating a MISPEvent entity, then load the Machine EventToAll or the transform EventToAttributes.

Alternatively initiate a transform on an existing Maltego entity. The currently supported entities are: AS, DNSName, Domain, EmailAddress, File, Hash, IPv4Address, NSRecord, Person, PhoneNumber, URL, Website

Installation and User Guide:

Installation is fairly easy by using pip, just read the steps in the documentation.

The User Guide gives some example use-cases.

Screenshot

Screenshot

ATT&CK

License

This software is licensed under GNU Affero General Public License version 3

  • Copyright (C) 2018 Christophe Vandeplas

Note: Before being rewritten from scratch this project was maintained by Emmanuel Bouillon. The code is available in the v1 branch.

The icons in the intelligence-icons folder are from intelligence-icons licensed CC-BY-SA - Françoise Penninckx, Brett Jordan